[ 84.519103][ T27] audit: type=1800 audit(1580669191.234:26): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.257453][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 85.257465][ T27] audit: type=1800 audit(1580669191.994:29): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 85.284184][ T27] audit: type=1800 audit(1580669191.994:30): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. 2020/02/02 18:46:43 fuzzer started 2020/02/02 18:46:45 dialing manager at 10.128.0.26:40485 2020/02/02 18:46:45 syscalls: 2939 2020/02/02 18:46:45 code coverage: enabled 2020/02/02 18:46:45 comparison tracing: enabled 2020/02/02 18:46:45 extra coverage: enabled 2020/02/02 18:46:45 setuid sandbox: enabled 2020/02/02 18:46:45 namespace sandbox: enabled 2020/02/02 18:46:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/02 18:46:45 fault injection: enabled 2020/02/02 18:46:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/02 18:46:45 net packet injection: enabled 2020/02/02 18:46:45 net device setup: enabled 2020/02/02 18:46:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/02 18:46:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:49:19 executing program 0: 18:49:19 executing program 1: syzkaller login: [ 252.876501][ T9796] IPVS: ftp: loaded support on port[0] = 21 [ 253.084655][ T9796] chnl_net:caif_netlink_parms(): no params data found [ 253.092076][ T9799] IPVS: ftp: loaded support on port[0] = 21 18:49:19 executing program 2: [ 253.251698][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.258836][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.282824][ T9796] device bridge_slave_0 entered promiscuous mode [ 253.333749][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.340985][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.363063][ T9796] device bridge_slave_1 entered promiscuous mode [ 253.414801][ T9804] IPVS: ftp: loaded support on port[0] = 21 [ 253.417004][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 253.441191][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.471003][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.570981][ T9796] team0: Port device team_slave_0 added [ 253.598541][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.608395][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state 18:49:20 executing program 3: [ 253.617276][ T9799] device bridge_slave_0 entered promiscuous mode [ 253.627906][ T9796] team0: Port device team_slave_1 added [ 253.651155][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.663236][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.683436][ T9799] device bridge_slave_1 entered promiscuous mode [ 253.720596][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 253.764311][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.781707][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.813525][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.842793][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.852788][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.859764][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.891528][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.914149][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.940647][ T9809] IPVS: ftp: loaded support on port[0] = 21 18:49:20 executing program 4: [ 254.075061][ T9796] device hsr_slave_0 entered promiscuous mode [ 254.201673][ T9796] device hsr_slave_1 entered promiscuous mode [ 254.259575][ T9799] team0: Port device team_slave_0 added 18:49:21 executing program 5: [ 254.308059][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.325276][ T9813] IPVS: ftp: loaded support on port[0] = 21 [ 254.331568][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.349466][ T9804] device bridge_slave_0 entered promiscuous mode [ 254.358881][ T9799] team0: Port device team_slave_1 added [ 254.379798][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.401864][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.409550][ T9804] device bridge_slave_1 entered promiscuous mode [ 254.485968][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.495071][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.523051][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.536006][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.548794][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.574724][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.581806][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.607943][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.646277][ T9815] IPVS: ftp: loaded support on port[0] = 21 [ 254.686005][ T9804] team0: Port device team_slave_0 added [ 254.696266][ T9804] team0: Port device team_slave_1 added [ 254.803785][ T9799] device hsr_slave_0 entered promiscuous mode [ 254.841713][ T9799] device hsr_slave_1 entered promiscuous mode [ 254.881420][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.889173][ T9799] Cannot create hsr debugfs directory [ 254.904769][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.911802][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.937843][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.979754][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.986841][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.014342][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.025875][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 255.194518][ T9804] device hsr_slave_0 entered promiscuous mode [ 255.231735][ T9804] device hsr_slave_1 entered promiscuous mode [ 255.301378][ T9804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.308951][ T9804] Cannot create hsr debugfs directory [ 255.317134][ T9796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.405839][ T9796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.455816][ T9796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.502955][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.510067][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.519188][ T9813] device bridge_slave_0 entered promiscuous mode [ 255.529278][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.536713][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.544653][ T9813] device bridge_slave_1 entered promiscuous mode [ 255.572699][ T9796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.614157][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 255.680351][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.700832][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.772712][ T9813] team0: Port device team_slave_0 added [ 255.794734][ T9815] chnl_net:caif_netlink_parms(): no params data found [ 255.812989][ T9813] team0: Port device team_slave_1 added [ 255.869600][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.878158][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.904583][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.935364][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.942828][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.952601][ T9809] device bridge_slave_0 entered promiscuous mode [ 255.961878][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.969076][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.977797][ T9809] device bridge_slave_1 entered promiscuous mode [ 255.985226][ T9799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.054990][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.062025][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.088127][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.122337][ T9799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.171116][ T9799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.228555][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.261219][ T9799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.325383][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.342869][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.350059][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.359086][ T9815] device bridge_slave_0 entered promiscuous mode [ 256.370495][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.378225][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.386873][ T9815] device bridge_slave_1 entered promiscuous mode [ 256.445724][ T9813] device hsr_slave_0 entered promiscuous mode [ 256.504854][ T9813] device hsr_slave_1 entered promiscuous mode [ 256.551502][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.559109][ T9813] Cannot create hsr debugfs directory [ 256.612429][ T9804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.658751][ T9809] team0: Port device team_slave_0 added [ 256.666917][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.687201][ T9804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.754155][ T9809] team0: Port device team_slave_1 added [ 256.760070][ T9804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.809153][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.845592][ T9804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.902777][ T9815] team0: Port device team_slave_0 added [ 256.932201][ T9815] team0: Port device team_slave_1 added [ 256.942874][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.949855][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.976824][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.021472][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.028568][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.056436][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.094556][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.102879][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.130481][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.143743][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.150716][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.177599][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.244474][ T9809] device hsr_slave_0 entered promiscuous mode [ 257.284462][ T9809] device hsr_slave_1 entered promiscuous mode [ 257.321360][ T9809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.328963][ T9809] Cannot create hsr debugfs directory [ 257.414017][ T9815] device hsr_slave_0 entered promiscuous mode [ 257.441772][ T9815] device hsr_slave_1 entered promiscuous mode [ 257.491472][ T9815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.499081][ T9815] Cannot create hsr debugfs directory [ 257.577214][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.585967][ T9813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.633443][ T9813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.736288][ T9813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.800221][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.817898][ T9813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.873246][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.883540][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.900248][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.970398][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.979931][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.987852][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.996773][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.005697][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.013019][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.026010][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.047709][ T9809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.108996][ T9809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.176576][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.184698][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.193549][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.202240][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.209292][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.220319][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.242181][ T9809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.287940][ T9809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.350270][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.359568][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.368457][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.377005][ T2838] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.384141][ T2838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.392424][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.401522][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.409961][ T2838] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.417086][ T2838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.425808][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.487757][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.497812][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.506145][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.515901][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.525647][ T9815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.565704][ T9815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.624225][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.631148][ T9815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.703904][ T9815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.774997][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.784692][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.794178][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.803740][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.813828][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.822922][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.831821][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.840193][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.847438][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.855265][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.864147][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.876033][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.884792][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.893426][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.900466][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.908635][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.916533][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.924553][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.976660][ T9799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.988190][ T9799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.000256][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.013579][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.022554][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.030771][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.040518][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.048967][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.057287][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.066004][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.075147][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.083644][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.107242][ T9804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.117762][ T9804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.147887][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.155749][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.166975][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.175580][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.184879][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.193846][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.202682][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.210950][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.219353][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.227810][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.236193][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.245417][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.277814][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.286063][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.327722][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.335871][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.343941][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.351858][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.363183][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.393489][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.405297][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.414879][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.423734][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.442164][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.504157][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.515737][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.527309][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.535690][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.578114][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.587120][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.597023][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.605889][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.614828][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.629920][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.646513][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.669677][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.680915][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.692084][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.700347][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.710632][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.718892][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.727470][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.736190][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.744147][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.752760][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.760439][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.768842][ T9799] device veth0_vlan entered promiscuous mode [ 259.798909][ T9804] device veth0_vlan entered promiscuous mode [ 259.813153][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.822911][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.832387][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.839461][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.848009][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.856613][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.865534][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.872667][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.881510][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.899332][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.933263][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.940971][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.949368][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.958696][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.968571][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.977442][ T3138] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.984951][ T3138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.993792][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.002620][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.011003][ T3138] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.018118][ T3138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.025905][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.035212][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.043627][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.053637][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.062598][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.070433][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.095230][ T9804] device veth1_vlan entered promiscuous mode [ 260.113750][ T9799] device veth1_vlan entered promiscuous mode [ 260.124765][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.133983][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.142663][ T2816] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.149723][ T2816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.158077][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.166737][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.175376][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.182482][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.190322][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.199052][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.207701][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.217090][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.225116][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.241805][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.251111][ T9796] device veth0_vlan entered promiscuous mode [ 260.299390][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.308492][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.319726][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.329063][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.337790][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.346815][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.355238][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.364320][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.373595][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.382326][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.390836][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.401067][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.409792][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.418738][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.428780][ T9815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.445828][ T9796] device veth1_vlan entered promiscuous mode [ 260.467502][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.477884][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.487174][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.495926][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.504759][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.513596][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.530357][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.545389][ T9809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.582191][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.594979][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.603940][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.622448][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.630989][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.640254][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.649389][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.658633][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.669873][ T9804] device veth0_macvtap entered promiscuous mode [ 260.709882][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.719845][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.728864][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.739637][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.749117][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.770011][ T9813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.781013][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.805232][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.816356][ T9799] device veth0_macvtap entered promiscuous mode [ 260.833075][ T9804] device veth1_macvtap entered promiscuous mode [ 260.848351][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.856491][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.865834][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.875324][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.884313][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.892966][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.901144][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.909944][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.919411][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.948043][ T9799] device veth1_macvtap entered promiscuous mode [ 260.983476][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.022452][ T9796] device veth0_macvtap entered promiscuous mode [ 261.030094][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.049566][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.058980][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.068113][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.076021][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.083896][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.093051][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.126208][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.137885][ T9796] device veth1_macvtap entered promiscuous mode [ 261.167905][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.177291][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.199807][ T9799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.217705][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.235967][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.248400][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.259783][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.269798][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.278861][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.287982][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.296487][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.305596][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.314882][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.324723][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.335700][ T9815] device veth0_vlan entered promiscuous mode [ 261.355698][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.367740][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.379195][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.388781][ T9809] device veth0_vlan entered promiscuous mode [ 261.396429][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.404532][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.412638][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.420330][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.428234][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.437771][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.553120][ T9815] device veth1_vlan entered promiscuous mode [ 261.604001][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.615085][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.625237][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.635889][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.647402][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.701564][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.709685][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.718839][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.728859][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.738147][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.768169][ T9809] device veth1_vlan entered promiscuous mode [ 261.785750][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.798599][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.808527][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.818983][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.830262][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.915139][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.923184][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.931352][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.939341][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.948379][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.957251][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.965469][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.005197][ T9813] device veth0_vlan entered promiscuous mode 18:49:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}}, 0x0) [ 262.049163][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.058175][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:49:28 executing program 2: ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4230000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x30, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x804) [ 262.158868][ T9809] device veth0_macvtap entered promiscuous mode [ 262.186106][ T9813] device veth1_vlan entered promiscuous mode [ 262.206497][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 18:49:29 executing program 1: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setsig(r0, 0xa, 0x14) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 262.234754][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.330522][ T9815] device veth0_macvtap entered promiscuous mode [ 262.345647][ T9809] device veth1_macvtap entered promiscuous mode 18:49:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) [ 262.373080][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.390423][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.416123][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.425926][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.446841][ T2816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.488158][ T9815] device veth1_macvtap entered promiscuous mode [ 262.528177][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:49:29 executing program 0: sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000f2c8065b6b99cac162c2201563546d25a6ee1df213c3cdf6962ff07b0a6f4c26718523a576f859937ea46c6c8c51e5814e15c86e3880b7aef368a775b6c2da20b9070cdc6441889a7b203875f145899ca2e17803028dc8ad560db1e3128e3d2d7e10c537a493ebdf9b947f678df40ea68a19200df53845a5ed6e9d437887089510b216984b52a9cc0d2117d143cd94c7aade2818d4c8705d84fe43aefd0f26de3975ee9224a694221e60f695ad0ce89a80e94fd2966c9c5d565f"], 0x1}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e62500006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 262.546131][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.563877][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.584443][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.594552][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.605078][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.616930][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.650220][ T9813] device veth0_macvtap entered promiscuous mode [ 262.671547][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.680014][ T9862] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 262.692173][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 18:49:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) [ 262.692341][ T9862] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 262.701931][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.712791][ T9862] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 262.733392][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.747312][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.760091][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.800807][ T9813] device veth1_macvtap entered promiscuous mode [ 262.816627][ T9862] EXT4-fs error (device loop0): ext4_fill_super:4544: inode #2: comm syz-executor.0: iget: root inode unallocated [ 262.825377][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.842820][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.853604][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.857231][ T9862] EXT4-fs (loop0): get root inode failed [ 262.864607][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.881313][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.892644][ T9862] EXT4-fs (loop0): mount failed [ 262.898593][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.911663][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 18:49:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) 18:49:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 262.954687][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.982056][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.991015][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.051485][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.069530][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.080091][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:49:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479", 0x34}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 263.097677][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.108759][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.119818][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.130408][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.144912][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.158255][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.285194][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.321937][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.352950][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.352959][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.352970][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.352976][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.352992][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:49:30 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x63}}], 0x18, 0x5}, 0x0) [ 263.492415][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.509252][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.542114][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.544667][ T9894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.562280][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 263.582177][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.595489][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.607070][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.618050][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.628236][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.640764][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.650932][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.665764][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.684690][ T9815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.695526][ T9815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.707389][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.716572][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.728715][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.737781][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.746677][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.762931][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.774018][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.783996][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.794437][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.805182][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.815685][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.825629][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.837196][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.847142][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 263.857606][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.870238][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.883157][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.897453][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:49:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) read$usbmon(r0, 0x0, 0x0) 18:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:31 executing program 1: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="97ef4ec9c79e8a8b1e509ab34f78802e7e4f1e75d0bb79191821de86775b1adabf861a31d79aeb35de38227a00b9e4e805273314c75ca98b400e69a7c15996ba49dbc57d6fe3fafa2f19cd28ae2b176af6a9ea5863c2abc55f6b3934125e5906d73b1fe4053949dfcd5887f843a8bb7407b8d611186e16c18fdb3ad1835ca8bd"], 0x2}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 18:49:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:49:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) [ 264.412294][ T9910] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 264.448950][ T9910] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) [ 264.460386][ T9910] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 264.472410][ T9910] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 264.509934][ T9910] EXT4-fs error (device loop1): ext4_fill_super:4544: inode #2: comm syz-executor.1: iget: root inode unallocated [ 264.535154][ T9910] EXT4-fs (loop1): get root inode failed [ 264.547782][ T9910] EXT4-fs (loop1): mount failed 18:49:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:49:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0x50}}, 0x0) 18:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 18:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4003) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 18:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) [ 264.904873][ C0] hrtimer: interrupt took 31005 ns 18:49:31 executing program 5: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 18:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) [ 265.060074][ T27] audit: type=1804 audit(1580669371.794:31): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/4/bus" dev="sda1" ino=16539 res=1 [ 265.203207][ T27] audit: type=1804 audit(1580669371.794:32): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/4/bus" dev="sda1" ino=16539 res=1 [ 265.425956][ T27] audit: type=1804 audit(1580669371.864:33): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/4/bus" dev="sda1" ino=16539 res=1 [ 265.616714][ T27] audit: type=1804 audit(1580669372.354:34): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/4/bus" dev="sda1" ino=16539 res=1 [ 265.644449][ T27] audit: type=1804 audit(1580669372.354:35): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/4/bus" dev="sda1" ino=16539 res=1 [ 265.834423][ T0] NOHZ: local_softirq_pending 08 18:49:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:34 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in, 0x0, 0x4, 0x0, 0xff}}, 0xe8) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 18:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:34 executing program 4: 18:49:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 18:49:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 18:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) [ 267.726175][ T27] audit: type=1804 audit(1580669374.464:36): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/5/bus" dev="sda1" ino=16557 res=1 [ 267.843113][ T27] audit: type=1804 audit(1580669374.514:37): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/5/bus" dev="sda1" ino=16557 res=1 18:49:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) [ 267.881218][ T27] audit: type=1804 audit(1580669374.564:38): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/5/bus" dev="sda1" ino=16557 res=1 18:49:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 267.944773][ T27] audit: type=1804 audit(1580669374.674:39): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir358573326/syzkaller.Ldqpdx/5/bus" dev="sda1" ino=16562 res=1 18:49:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 268.033521][ T27] audit: type=1804 audit(1580669374.764:40): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir358573326/syzkaller.Ldqpdx/5/bus" dev="sda1" ino=16562 res=1 18:49:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 18:49:37 executing program 4: 18:49:37 executing program 5: 18:49:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 18:49:37 executing program 5: 18:49:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 18:49:37 executing program 4: [ 270.860255][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 270.860271][ T27] audit: type=1804 audit(1580669377.594:46): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/7/bus" dev="sda1" ino=16581 res=1 18:49:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:37 executing program 4: 18:49:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 18:49:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) [ 271.204813][ T27] audit: type=1804 audit(1580669377.634:47): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir149876131/syzkaller.LJRlfk/7/bus" dev="sda1" ino=16581 res=1 18:49:38 executing program 5: 18:49:38 executing program 4: 18:49:38 executing program 5: 18:49:38 executing program 1: 18:49:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:38 executing program 5: 18:49:38 executing program 4: 18:49:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:40 executing program 1: 18:49:40 executing program 5: 18:49:40 executing program 4: 18:49:40 executing program 1: 18:49:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:40 executing program 4: 18:49:40 executing program 5: 18:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:41 executing program 1: 18:49:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 18:49:43 executing program 5: 18:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:43 executing program 4: 18:49:43 executing program 1: 18:49:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 18:49:44 executing program 4: 18:49:44 executing program 1: 18:49:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) set_mempolicy(0x0, &(0x7f0000000040)=0x5c9, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000100)={0x28}, 0x28) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 277.665682][ T27] audit: type=1804 audit(1580669384.404:48): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir358573326/syzkaller.Ldqpdx/15/bus" dev="sda1" ino=16625 res=1 [ 277.739562][ T27] audit: type=1804 audit(1580669384.444:49): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir358573326/syzkaller.Ldqpdx/15/bus" dev="sda1" ino=16625 res=1 [ 277.962008][ T27] audit: type=1804 audit(1580669384.694:50): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir358573326/syzkaller.Ldqpdx/15/bus" dev="sda1" ino=16625 res=1 18:49:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 18:49:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 18:49:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/34, 0x22}]}, &(0x7f0000000240)="dd550241516a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) 18:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:47 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000100)=0x4) 18:49:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:47 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:47 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:49:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) socket(0x0, 0x0, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) dup(r3) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 18:49:47 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 18:49:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:49:50 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x400000024800, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x50000}], 0x1, 0x0) 18:49:50 executing program 1: io_setup(0x70f, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)='7', 0x1}]) 18:49:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:50 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00000004c0)="96", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) 18:49:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'HL\x00'}, 0x0) r0 = socket(0x400000000000010, 0x80002, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x5a4d, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0xff) r3 = socket$kcm(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x69) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0xebd4b6270603394a) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r5, 0x200004) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x319bc0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r7 = getpgid(0x0) syz_open_procfs(r7, &(0x7f0000000080)='stat\x00') fcntl$setown(r0, 0x8, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r8 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x0) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) 18:49:50 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) [ 284.186701][T10219] syz-executor.5 (10219) used greatest stack depth: 22760 bytes left [ 285.674537][ T0] NOHZ: local_softirq_pending 08 18:49:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000a80)={@ipv4={[], [], @empty}, @dev, @ipv4={[], [], @remote}, 0x0, 0x8000, 0xa1, 0x0, 0x0, 0x41900041}) 18:49:53 executing program 4: r0 = io_uring_setup(0x128, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) 18:49:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x0) 18:49:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'HL\x00'}, 0x0) r0 = socket(0x400000000000010, 0x80002, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x5a4d, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0xff) r3 = socket$kcm(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x69) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0xebd4b6270603394a) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r5, 0x200004) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x319bc0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r7 = getpgid(0x0) syz_open_procfs(r7, &(0x7f0000000080)='stat\x00') fcntl$setown(r0, 0x8, 0x0) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r8 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x0) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) 18:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x24, &(0x7f0000000080)=""/4078, &(0x7f0000001140)=0xfee) 18:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:53 executing program 4: r0 = io_uring_setup(0x128, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) 18:49:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b41", 0x3a}], 0x4, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:49:56 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 18:49:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:56 executing program 4: r0 = io_uring_setup(0x128, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) 18:49:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 289.762174][T10285] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:49:56 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) 18:49:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 18:49:56 executing program 5: r0 = io_uring_setup(0x128, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r2, r1], 0x2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) setresuid(0x0, 0x0, 0x0) clone3(0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 18:49:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000000)) close(r3) 18:49:56 executing program 4: r0 = io_uring_setup(0x128, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) 18:49:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) [ 290.184491][T10307] ------------[ cut here ]------------ [ 290.190092][T10307] ODEBUG: free active (active state 0) object type: work_struct hint: io_ring_file_ref_switch+0x0/0xac0 [ 290.201702][T10307] WARNING: CPU: 0 PID: 10307 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 290.211267][T10307] Kernel panic - not syncing: panic_on_warn set ... [ 290.217982][T10307] CPU: 0 PID: 10307 Comm: syz-executor.5 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 290.227870][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.237931][T10307] Call Trace: [ 290.241357][T10307] dump_stack+0x197/0x210 [ 290.245711][T10307] ? debug_print_object+0x100/0x250 [ 290.251056][T10307] panic+0x2e3/0x75c [ 290.254953][T10307] ? add_taint.cold+0x16/0x16 [ 290.259739][T10307] ? __kasan_check_write+0x14/0x20 [ 290.264951][T10307] ? __warn.cold+0x14/0x3e [ 290.269490][T10307] ? __warn+0xd9/0x1cf [ 290.273572][T10307] ? debug_print_object+0x168/0x250 [ 290.278774][T10307] __warn.cold+0x2f/0x3e [ 290.283025][T10307] ? debug_print_object+0x168/0x250 [ 290.288234][T10307] report_bug+0x289/0x300 [ 290.292653][T10307] do_error_trap+0x11b/0x200 [ 290.297405][T10307] do_invalid_op+0x37/0x50 [ 290.301954][T10307] ? debug_print_object+0x168/0x250 [ 290.307205][T10307] invalid_op+0x23/0x30 [ 290.311404][T10307] RIP: 0010:debug_print_object+0x168/0x250 [ 290.317199][T10307] Code: dd 00 d4 91 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 00 d4 91 88 48 c7 c7 60 c9 91 88 e8 57 9c a1 fd <0f> 0b 83 05 e3 13 01 07 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 290.337232][T10307] RSP: 0018:ffffc900017f7c30 EFLAGS: 00010082 [ 290.344306][T10307] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 290.352395][T10307] RDX: 0000000000000000 RSI: ffffffff815eb7c6 RDI: fffff520002fef78 [ 290.360512][T10307] RBP: ffffc900017f7c70 R08: ffff88804f9d20c0 R09: ffffed1015d045c9 [ 290.368486][T10307] R10: ffffed1015d045c8 R11: ffff8880ae822e43 R12: 0000000000000001 [ 290.376454][T10307] R13: ffffffff89b7e460 R14: ffffffff814c81f0 R15: ffff88809a0d9a80 [ 290.385035][T10307] ? __exit_umh+0x2e0/0x2e0 [ 290.389773][T10307] ? vprintk_func+0x86/0x189 [ 290.394412][T10307] debug_check_no_obj_freed+0x2d4/0x43f [ 290.400170][T10307] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 290.405730][T10307] kfree+0xf8/0x2c0 [ 290.409567][T10307] io_sqe_files_unregister+0x3b1/0x6c0 [ 290.415032][T10307] io_ring_ctx_wait_and_kill+0x430/0x9a0 [ 290.420704][T10307] ? __sanitizer_cov_trace_cmp8+0x10/0x20 [ 290.426444][T10307] io_uring_release+0x42/0x50 [ 290.431184][T10307] __fput+0x2ff/0x890 [ 290.435174][T10307] ? io_ring_ctx_wait_and_kill+0x9a0/0x9a0 [ 290.440977][T10307] ____fput+0x16/0x20 [ 290.445031][T10307] task_work_run+0x145/0x1c0 [ 290.449707][T10307] exit_to_usermode_loop+0x316/0x380 [ 290.454989][T10307] do_syscall_64+0x676/0x790 [ 290.459580][T10307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.465465][T10307] RIP: 0033:0x414f31 [ 290.469433][T10307] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 290.489248][T10307] RSP: 002b:00007ffe18118c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 290.497677][T10307] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000414f31 [ 290.505841][T10307] RDX: 0000001b31220000 RSI: 0000000000000000 RDI: 0000000000000003 [ 290.513845][T10307] RBP: 0000000000000001 R08: 00000000f7cdcd26 R09: 00000000f7cdcd2a [ 290.521822][T10307] R10: 00007ffe18118d10 R11: 0000000000000293 R12: 000000000075c9a0 [ 290.529790][T10307] R13: 000000000075c9a0 R14: 00000000007609f8 R15: 000000000075bfd4 [ 290.539471][T10307] Kernel Offset: disabled [ 290.543811][T10307] Rebooting in 86400 seconds..