Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. 2020/08/02 16:46:14 fuzzer started 2020/08/02 16:46:14 dialing manager at 10.128.0.26:46491 2020/08/02 16:46:14 syscalls: 3273 2020/08/02 16:46:14 code coverage: enabled 2020/08/02 16:46:14 comparison tracing: enabled 2020/08/02 16:46:14 extra coverage: enabled 2020/08/02 16:46:14 setuid sandbox: enabled 2020/08/02 16:46:14 namespace sandbox: enabled 2020/08/02 16:46:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/02 16:46:14 fault injection: enabled 2020/08/02 16:46:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/02 16:46:14 net packet injection: enabled 2020/08/02 16:46:14 net device setup: enabled 2020/08/02 16:46:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/02 16:46:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/02 16:46:14 USB emulation: enabled 2020/08/02 16:46:14 hci packet injection: enabled 16:48:40 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f00000004c0)=@in={0x0, 0x2}, 0xd) syzkaller login: [ 203.569834][ T6859] IPVS: ftp: loaded support on port[0] = 21 16:48:40 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x1202, &(0x7f0000000100)={0x0, 0x0, 0x1, 'q'}, 0x9) [ 203.718571][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 203.808534][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.817444][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.826113][ T6859] device bridge_slave_0 entered promiscuous mode [ 203.836352][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.843504][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.851916][ T6859] device bridge_slave_1 entered promiscuous mode [ 203.879193][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.894904][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.925378][ T6859] team0: Port device team_slave_0 added [ 203.934053][ T6859] team0: Port device team_slave_1 added [ 203.957478][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.964789][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.025127][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.046014][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.052993][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.068172][ T7013] IPVS: ftp: loaded support on port[0] = 21 [ 204.082153][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 16:48:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1fc0, 0x0, 0x0, 0x800e00509) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r5 = dup(r3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r5, r6) shutdown(r6, 0x0) [ 204.178162][ T6859] device hsr_slave_0 entered promiscuous mode [ 204.236495][ T6859] device hsr_slave_1 entered promiscuous mode [ 204.357121][ T7032] IPVS: ftp: loaded support on port[0] = 21 16:48:41 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x1202, &(0x7f0000000040), 0x8) [ 204.627711][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 204.759474][ T6859] netdevsim netdevsim0 netdevsim0: renamed from eth0 16:48:41 executing program 4: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="10024e210000000000000000000000000000000000000000000000000000000000000000000000000000006565f8d700"/125, @ANYRES32], 0x94) [ 204.883204][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 204.930767][ T6859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.006904][ T6859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.086548][ T7243] IPVS: ftp: loaded support on port[0] = 21 [ 205.102803][ T6859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.217788][ T7288] IPVS: ftp: loaded support on port[0] = 21 [ 205.242340][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state 16:48:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/221, 0xdd}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/141, 0x8d}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000500)=""/130, 0x82}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10}, 0x40002) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r5, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r4, 0x0) [ 205.274975][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.283217][ T7032] device bridge_slave_0 entered promiscuous mode [ 205.310552][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.318387][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.326705][ T7013] device bridge_slave_0 entered promiscuous mode [ 205.356833][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.363924][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.375284][ T7032] device bridge_slave_1 entered promiscuous mode [ 205.404805][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.411914][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.425812][ T7013] device bridge_slave_1 entered promiscuous mode [ 205.471391][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.498435][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.528355][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.549600][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.573283][ T7367] IPVS: ftp: loaded support on port[0] = 21 [ 205.603607][ T7013] team0: Port device team_slave_0 added [ 205.620039][ T7032] team0: Port device team_slave_0 added [ 205.643052][ T7013] team0: Port device team_slave_1 added [ 205.667937][ T7032] team0: Port device team_slave_1 added [ 205.731932][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.742769][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.770694][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.785954][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.792903][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.819630][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.880377][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.890988][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.918013][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.943567][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 205.965989][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.972974][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.004715][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.138787][ T7032] device hsr_slave_0 entered promiscuous mode [ 206.184778][ T7032] device hsr_slave_1 entered promiscuous mode [ 206.224438][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.232253][ T7032] Cannot create hsr debugfs directory [ 206.247567][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 206.306977][ T7013] device hsr_slave_0 entered promiscuous mode [ 206.344591][ T7013] device hsr_slave_1 entered promiscuous mode [ 206.394274][ T7013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.401947][ T7013] Cannot create hsr debugfs directory [ 206.427501][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.434708][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.442644][ T7243] device bridge_slave_0 entered promiscuous mode [ 206.487126][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.495472][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.503097][ T7243] device bridge_slave_1 entered promiscuous mode [ 206.561174][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.580007][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.633343][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.688098][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.701844][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.711208][ T7288] device bridge_slave_0 entered promiscuous mode [ 206.748147][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.757680][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.776488][ T7243] team0: Port device team_slave_0 added [ 206.788725][ T7243] team0: Port device team_slave_1 added [ 206.796416][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.803476][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.812552][ T7288] device bridge_slave_1 entered promiscuous mode [ 206.820153][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 206.841556][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.882199][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.891101][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.918265][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.933910][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.941719][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.969623][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.999237][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.048859][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.077902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.086616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.095527][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.102796][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.147660][ T7243] device hsr_slave_0 entered promiscuous mode [ 207.214717][ T7243] device hsr_slave_1 entered promiscuous mode [ 207.254300][ T7243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.261873][ T7243] Cannot create hsr debugfs directory [ 207.305221][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.341431][ T7288] team0: Port device team_slave_0 added [ 207.351465][ T7288] team0: Port device team_slave_1 added [ 207.373531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.382384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.390966][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.398143][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.457073][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.464056][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.492769][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.515204][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.525154][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.533749][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.543185][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.556521][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.563598][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.573007][ T7367] device bridge_slave_0 entered promiscuous mode [ 207.589991][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.597517][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.627508][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.639825][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.653017][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.661928][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.671375][ T7367] device bridge_slave_1 entered promiscuous mode [ 207.697488][ T7032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.761988][ T7032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.809505][ T7032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.874027][ T7032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.933477][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.948351][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.998458][ T7288] device hsr_slave_0 entered promiscuous mode [ 208.064666][ T7288] device hsr_slave_1 entered promiscuous mode [ 208.114272][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.121855][ T7288] Cannot create hsr debugfs directory [ 208.143873][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.157062][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.166096][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.197744][ T7013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.248841][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.284479][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.292941][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.303324][ T7013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.343431][ T7013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.398359][ T7013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.469482][ T7367] team0: Port device team_slave_0 added [ 208.489387][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.522049][ T7367] team0: Port device team_slave_1 added [ 208.600495][ T7243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.660507][ T7243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.711699][ T7243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.759680][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.766812][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.794610][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.807563][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.814916][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.841731][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.881015][ T7243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.928515][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.936786][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.007523][ T7367] device hsr_slave_0 entered promiscuous mode [ 209.056419][ T7367] device hsr_slave_1 entered promiscuous mode [ 209.094271][ T7367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.101851][ T7367] Cannot create hsr debugfs directory [ 209.119612][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.280146][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.299914][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.311374][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.389455][ T6859] device veth0_vlan entered promiscuous mode [ 209.409900][ T7288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.446102][ T7288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.478486][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.487066][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.496743][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.505063][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.517615][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.530830][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.563760][ T7288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.618279][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.626467][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.639019][ T6859] device veth1_vlan entered promiscuous mode [ 209.654735][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.662828][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.676862][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.689530][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.699822][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.706955][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.718717][ T7367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.778200][ T7288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.873733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.882390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.891799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.902517][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.909736][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.918097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.927923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.939429][ T7367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.987217][ T7367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.056251][ T7367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.163882][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.177092][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.187153][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.196045][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.205523][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.224210][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.233113][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.242242][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.251081][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.260111][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.269558][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.289549][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.308401][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.323133][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.356112][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.368238][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.378184][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.387815][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.396776][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.403851][ T7200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.412149][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.421283][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.429939][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.437091][ T7200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.460094][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.468280][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.492479][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.504377][ T6859] device veth0_macvtap entered promiscuous mode [ 210.525950][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.536259][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.544462][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.552209][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.562174][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.575481][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.591982][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.600777][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.613714][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.621043][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.633834][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.648941][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.680163][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.690187][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.700312][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.710166][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.719004][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.726160][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.733782][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.743068][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.753026][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.763845][ T6859] device veth1_macvtap entered promiscuous mode [ 210.777492][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.789413][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.798965][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.847440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.859290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.869111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.880052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.889059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.898440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.907375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.916417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.925287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.933583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.947313][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.961581][ T7013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.986902][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.995815][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.004768][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.012998][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.023191][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.034671][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.062405][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.080963][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.093548][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.110235][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.140390][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.149874][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.175995][ T6859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.188369][ T6859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.197663][ T6859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.206938][ T6859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.232448][ T7032] device veth0_vlan entered promiscuous mode [ 211.242349][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.253405][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.261549][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.271511][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.285736][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.299130][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.323057][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.334436][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.342379][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.352663][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.361629][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.369799][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.383053][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.398621][ T7032] device veth1_vlan entered promiscuous mode [ 211.546958][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.556805][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.566128][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.573194][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.639977][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.663361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.671921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.681797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.690677][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.699971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.708452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.715604][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.723370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.731334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.767448][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.781582][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.790895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.799981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.808845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.824812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.833547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.843472][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.852615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.872857][ T7032] device veth0_macvtap entered promiscuous mode [ 211.904683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.912568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.921823][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.931836][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.938970][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.947127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.955779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.964381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.973181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.981708][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.988854][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.997927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.006408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.014993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.023332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.033044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.041924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.050432][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.058645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.094208][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.104787][ T7032] device veth1_macvtap entered promiscuous mode [ 212.123142][ T7288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.136007][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.146587][ T7013] device veth0_vlan entered promiscuous mode [ 212.169941][ T7243] device veth0_vlan entered promiscuous mode [ 212.181206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.195345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.203686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.212942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.221762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.237111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.245197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.260754][ T7013] device veth1_vlan entered promiscuous mode [ 212.281035][ T7243] device veth1_vlan entered promiscuous mode [ 212.303902][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.321609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.331633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.342517][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.355346][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.367158][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.392269][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.401511][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.417749][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.429790][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.439337][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.451324][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.461242][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.479099][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.496023][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.510399][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.522623][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.536714][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.546838][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.555711][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.566700][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.591315][ T7367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.602937][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.633178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.643086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.652520][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.661484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.670784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.679404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.692620][ T7013] device veth0_macvtap entered promiscuous mode [ 212.713298][ T7243] device veth0_macvtap entered promiscuous mode [ 212.739221][ T7032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.770930][ T7032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.809323][ T7032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.843927][ T7032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 16:48:49 executing program 0: [ 212.890751][ T7013] device veth1_macvtap entered promiscuous mode [ 212.929013][ T7243] device veth1_macvtap entered promiscuous mode 16:48:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a01530660034003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa004801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 213.056554][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.071779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.130161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.150649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.167754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.188606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.212719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.221855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.232920][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.254524][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.269537][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.280353][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.293079][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.321283][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.332336][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.343838][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.356821][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.366753][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.379370][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:48:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)='0', 0x1}], 0x1) [ 213.392594][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.433185][ T8144] new mount options do not match the existing superblock, will be ignored [ 213.452038][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.465506][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.475389][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.484986][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.498893][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.514644][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.526949][ T7013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.539372][ T7013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.552530][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.569439][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.595713][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.609427][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.625999][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.636778][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.648802][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.660408][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.708108][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.716044][ T8144] new mount options do not match the existing superblock, will be ignored [ 213.716936][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.735781][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.746471][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:48:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) [ 213.759438][ T7013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.776657][ T7013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.789219][ T7013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.800634][ T7013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.832992][ T7288] device veth0_vlan entered promiscuous mode [ 213.845987][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.861356][ T7243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.886719][ T7243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.916050][ T7243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.926960][ T7243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.945608][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.955471][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 16:48:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) [ 214.041354][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.050563][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.070689][ T8159] new mount options do not match the existing superblock, will be ignored 16:48:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 214.096310][ T8159] new mount options do not match the existing superblock, will be ignored [ 214.118285][ T7288] device veth1_vlan entered promiscuous mode [ 214.251709][ T8166] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.275909][ C0] hrtimer: interrupt took 51361 ns [ 214.374432][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.387282][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.401381][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.412961][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.451405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.461785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.482399][ T7288] device veth0_macvtap entered promiscuous mode [ 214.504013][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.520317][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.530440][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.548903][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.562710][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.574542][ T7367] device veth0_vlan entered promiscuous mode [ 214.612837][ T7288] device veth1_macvtap entered promiscuous mode [ 214.639571][ T7367] device veth1_vlan entered promiscuous mode [ 214.718747][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.730899][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.743060][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.754588][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:48:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 214.765001][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.775991][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.792339][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.806874][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.819352][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.835491][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.844613][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.852626][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.865464][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.881888][ T7367] device veth0_macvtap entered promiscuous mode [ 214.904093][ T8115] Bluetooth: hci0: command 0x0409 tx timeout [ 214.916311][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.930551][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.942375][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.955467][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.966143][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 214.982299][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.993161][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.005045][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.094499][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.102272][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.135725][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.176760][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.214808][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.282048][ T7367] device veth1_macvtap entered promiscuous mode [ 215.327173][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.365258][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.406430][ T7288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.465808][ T7288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.541759][ T7288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.615133][ T7288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 16:48:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 16:48:52 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 215.979863][ T8217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.987391][ T8215] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.025556][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.051074][ T8219] hfs: unable to change iocharset [ 216.058543][ T8219] hfs: unable to parse mount options [ 216.071087][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.106591][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.193349][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.203191][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.296527][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.333586][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.370270][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.381315][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.405192][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.422392][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.506067][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.514113][ T8219] hfs: unable to change iocharset [ 216.514134][ T8219] hfs: unable to parse mount options [ 216.556006][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.601366][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.639080][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.683313][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.712484][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.724299][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.735544][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.746273][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.757559][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.768158][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.780007][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.794582][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.810455][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.819613][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.891568][ T7367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.901061][ T7367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.916348][ T7367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.932115][ T7367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.944702][ T12] Bluetooth: hci0: command 0x041b tx timeout [ 216.950776][ T12] Bluetooth: hci1: command 0x0409 tx timeout [ 217.423387][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 217.503414][ T23] Bluetooth: hci3: command 0x0409 tx timeout 16:48:54 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0e85667, &(0x7f0000000000)) [ 219.023172][ T17] Bluetooth: hci1: command 0x041b tx timeout [ 219.029205][ T17] Bluetooth: hci0: command 0x040f tx timeout 16:48:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, 0x0) open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[], 0x7b) sendfile(r1, r1, &(0x7f0000000240), 0x7ffd) sendfile(r0, r0, &(0x7f0000000240), 0x7ffd) 16:48:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 16:48:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x802c542a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26c0ba5712a768157fe2ccbe4e783d475793bb"}) 16:48:55 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:55 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:55 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108471168f40000000000590000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a80050002800400418008001b"], 0x34}}, 0x0) 16:48:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x802c542a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26c0ba5712a768157fe2ccbe4e783d475793bb"}) [ 219.242004][ T8268] hfs: unable to change iocharset [ 219.247236][ T8268] hfs: unable to parse mount options [ 219.252187][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.280967][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 16:48:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0) [ 219.295864][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.304447][ T8270] hfs: unable to parse mount options [ 219.307484][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.322221][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.333521][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.343851][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.356089][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.368672][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.383245][ T8270] hfs: unable to parse mount options 16:48:56 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 219.393798][ T8266] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.418509][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.434076][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 16:48:56 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) [ 219.454085][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.513135][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 219.593660][ T5] Bluetooth: hci3: command 0x041b tx timeout 16:48:56 executing program 4: 16:48:56 executing program 3: [ 219.635953][ T8286] hfs: unable to change iocharset [ 219.638648][ T8289] hfs: unable to parse mount options [ 219.688454][ T8286] hfs: unable to parse mount options [ 219.983245][ T5] Bluetooth: hci4: command 0x0409 tx timeout 16:48:56 executing program 5: 16:48:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9105cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 16:48:57 executing program 4: 16:48:57 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:57 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:57 executing program 3: 16:48:57 executing program 3: 16:48:57 executing program 5: [ 220.215539][ T8306] hfs: unable to change iocharset [ 220.220677][ T8306] hfs: unable to parse mount options 16:48:57 executing program 4: 16:48:57 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 220.295818][ T8308] hfs: unable to parse mount options [ 220.305031][ T17] Bluetooth: hci5: command 0x0409 tx timeout 16:48:57 executing program 3: 16:48:57 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:57 executing program 5: [ 220.601154][ T8325] hfs: unable to parse mount options 16:48:58 executing program 0: 16:48:58 executing program 4: 16:48:58 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:58 executing program 3: 16:48:58 executing program 5: 16:48:58 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) [ 221.170817][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 221.199982][ T5] Bluetooth: hci1: command 0x040f tx timeout 16:48:58 executing program 3: 16:48:58 executing program 0: 16:48:58 executing program 3: 16:48:58 executing program 4: 16:48:58 executing program 5: 16:48:58 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:58 executing program 4: 16:48:58 executing program 3: 16:48:58 executing program 2: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:58 executing program 0: 16:48:58 executing program 5: 16:48:58 executing program 3: [ 221.582825][ T5] Bluetooth: hci2: command 0x040f tx timeout 16:48:58 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:58 executing program 4: 16:48:58 executing program 0: 16:48:58 executing program 5: [ 221.663031][ T5] Bluetooth: hci3: command 0x040f tx timeout 16:48:58 executing program 4: 16:48:58 executing program 3: 16:48:58 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:58 executing program 4: 16:48:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) pidfd_open(0x0, 0x0) 16:48:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x8) mount$overlay(0x40000a, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x3000082, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_off='nfs_export=off'}], [], 0xf603000000000000}) 16:48:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x30, 0x0, &(0x7f0000000180)) 16:48:58 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:58 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 221.991883][ T8381] overlayfs: bad mount option "redirect_dir=./file0" 16:48:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b5e, &(0x7f0000000040)='wlan0\x00V\xbe\"\\\rs\xb8a\xb7\xce\x06\x00\x00\b\x05\x00\x15o\xb2z\xe0\xe0,f\xf22\x99\xbf\xab\xd3\b\x00\x80\x00\x00w\xc7E\fv\xb8\x8f>Q\xa4h\x133\x15\xf3K\x86\xf4l)H\xdem\x13ZX\xc6F\xe9:VU\xe0\xc6\xaf\xbb\xc1E\xd6X\xa9\x8ce\x16\xbd5\x1b|\x9f\xb0?w\xea\xc2\x82&I\x8f\x17\xd7K\xe0\xc5\x1f\xe0\xa8\x99\xc1n\xe3\xcd\x86G\x93/\xb2\xec\x01\xa3\xdcL\x06\xb0\xdc.1\x84\xe8\xde\xb4\x06C_\xca\x11\xd4A\xaa~\x9d\r\xd88_al\x05\xc0\xad\xfc\xfaV\xdb4\xb3\xd1\x03\xad\xc8\x9eD\xc4\xa9\x04\xac\x95n\x8dj\x10\xde\xba\xcc%m\xbd]\xf1\nB\xf6\x12\xa1\x1e\xec\xa5\x86\xbb\xd3\xeeXp\xf3\x00\x00\x00\x00') 16:48:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x8, 0x0, &(0x7f0000000180)) [ 222.062518][ T12] Bluetooth: hci4: command 0x041b tx timeout 16:48:58 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1}}) 16:48:59 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) [ 222.167529][ T28] audit: type=1804 audit(1596386939.002:2): pid=8396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir905123972/syzkaller.Fxq1Ks/12/bus" dev="sda1" ino=15805 res=1 errno=0 16:48:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 16:48:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) getpgrp(0x0) 16:48:59 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:48:59 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$netlink(0x10, 0x3, 0x4) [ 222.382596][ T17] Bluetooth: hci5: command 0x041b tx timeout 16:48:59 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:48:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) getpgrp(0x0) [ 222.902369][ T28] audit: type=1804 audit(1596386939.732:3): pid=8444 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir905123972/syzkaller.Fxq1Ks/12/bus" dev="sda1" ino=15805 res=1 errno=0 16:48:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:48:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$dsp(r1, &(0x7f0000000040)=""/50, 0x32) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:48:59 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:59 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:48:59 executing program 3: syz_mount_image$ntfs(&(0x7f0000000940)='ntfs\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={[{@fmask={'fmask'}}, {@uid={'uid'}}], [{@dont_appraise='dont_appraise'}]}) [ 222.970718][ T28] audit: type=1804 audit(1596386939.782:4): pid=8446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir905123972/syzkaller.Fxq1Ks/12/bus" dev="sda1" ino=15805 res=1 errno=0 [ 222.999960][ T28] audit: type=1800 audit(1596386939.832:5): pid=8444 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15805 res=0 errno=0 16:48:59 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$netlink(0x10, 0x3, 0x4) [ 223.032365][ T28] audit: type=1800 audit(1596386939.832:6): pid=8446 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15805 res=0 errno=0 16:49:00 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:49:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) getsockname$packet(r1, 0x0, &(0x7f0000000400)) 16:49:00 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$netlink(0x10, 0x3, 0x4) 16:49:00 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 223.225334][ T8457] ntfs: (device loop3): parse_options(): Unrecognized mount option dont_appraise. [ 223.238571][ T8457] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 223.262344][ T23] Bluetooth: hci1: command 0x0419 tx timeout 16:49:00 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:49:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket(0x8000000002, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653075cb4ae752f0062f28ac9ae07a8323c68a7d63c6b7206d9ffe474c5ef24beae8f21f9945ba5952df66fc5ed45ad4b2868a646624037bc7e70f40329e1d976c362632e4b84763c3b4a6e2dba7716987e95837c3f25547cc2b7b7acf8cea50768d7ad12fbb2152e861232eacb88e4dd", 0x71}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 16:49:00 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$netlink(0x10, 0x3, 0x4) [ 223.662231][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 223.742697][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 224.142321][ T6553] Bluetooth: hci4: command 0x040f tx timeout [ 224.462153][ T23] Bluetooth: hci5: command 0x040f tx timeout 16:49:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x14, 0x0, &(0x7f0000000180)) 16:49:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b2b, &(0x7f0000000140)='wlan0\x00V\xbe\"\\Ms\xb7\xce\x06\x00\x00\b\x99\xbf\xab\xd3\b\x00\x80\x00\x00w\xc7E\fv\xb8\x8f>Q\xa4h\x133\x15\xf3K\x86\xf4l)H\xdem\x13ZXDS\x8e\x05\x96\xc0Rf:h\xce\x00\x00\x00\x00\x8ce\x16\xbd5\x1b~\x9f\xb0?w\xea\xc2\x82&I\x8f\x17\xd7K\xe0\xc5\x1f\xe0\xa8\x99\xc1n\xe3\xcd\x86G\x93/\xb2\xec\x01\xb5\xdcL\x06\xb0\xdc.1\x84\xe8\xde\b\x00G\'\xc6%y\x96\xe2~\x9d\r\xd88_al\x05\xc0\xad\xfc\xfaV\xdb4\xb3\xd1\x03\xad\xc8\x9eD\xc4\xa9\x04\xac\x95n\x82j\x10\xde\xba\xcc%m\xbd]\xf1\nB\xf6\x12\xa1\x1e\xec\xb5\x86\xbb\xd3\xeeXp\xf3\x00\x00\x00\x02\x1f0\x9e\xe8\x81\x90Wc\xdf\x1by\xbdaS\x96\x84n(\xc6!\x1fBo0\x9eCT\xc3\xfe\xb5\xb1o\xd1\xed\x98\xd91\xf5\x04`\xf0PN\xf2\xccQ6\xe0\xcaO\x11$Hm.x\x00\xd9~\xed\xe7\xf9\xdb:\nN_c\x1d*\xd1\x16\x14_\xd6\xd7\xa4N\xae\xed\xedV\xd3\xe7\xb8\xe2\x00x\xe9;\xeb,\x82\x1335S\xa7\xaf\xa4s\x17-\xa1\xc7zX\xa1\xdc\x92\'\xc7\n\x8ep6\xc7\xb8IW}@\xfd\x9e(\f\x05\xdeF\xd9\xc0d\x04\x81\x91\x89j\xceif\x94\f\xdet\xb4}\xc0uV}\xf2\xa6\xa0\x9d\xab*\xfb\xb6(\x0eI\xe1\xdc\v\t$\xfd\xa2\x9b\x14\xbf~\x12\bd\x12\xe9\x1a\xb0\xb5\xd4\xf8\xef\x8d\x9d!\xe1\x91r\x94\\\x8b;\xac\xe45=bF\xcf\xa0j\xa3\x99\xfdN\xf4.,Q\xc4m\xe5\x89\f\xd4m\x8e\x8c\x18\xb23\xe6\x9dA\xf2\xd0F\xd7\x10\xf6\xb9\xbb\xf9\xdd\xc5\x81\xd5qV>\xa7\x87\xd4\x16\xbd)\x8ab\xf9t\x9f\xd9\x12\x165\\IT\x87\xbat\"\x80\xd5\xf5\xdf\x84\x1d\x95>\x94eV\xf4\xc0WK\xef\\\xf4t\xf8\xda\x06\xcd4\x98\xf6\xa7x\xecH\x9e\xef\x8f&\xe2\x0e') 16:49:02 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 16:49:02 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:49:02 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) renameat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 16:49:02 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}) 16:49:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x28, 0x0, &(0x7f0000000180)) [ 226.150325][ T8508] hfs: unable to parse mount options 16:49:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0x3a]}) [ 226.221977][ T17] Bluetooth: hci4: command 0x0419 tx timeout 16:49:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:03 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) [ 226.324319][ T8521] hfs: can't find a HFS filesystem on dev loop2 [ 226.430626][ T8531] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 226.492233][ T8532] hfs: unable to parse mount options [ 226.542049][ T23] Bluetooth: hci5: command 0x0419 tx timeout 16:49:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 16:49:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}) 16:49:03 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="29060c031b00ff0700000000000000040105"], 0x38) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:49:03 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'iso9660\x00'}}]}) 16:49:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000), 0x4) 16:49:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000240)) io_setup(0xb, &(0x7f0000000040)) [ 226.715770][ T8547] hfs: can't find a HFS filesystem on dev loop2 [ 226.738005][ T8552] hfs: unable to parse mount options 16:49:03 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}) 16:49:03 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@umask={'umask'}}]}) 16:49:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 16:49:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:03 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="29060c031b00ff0700000000000000040105"], 0x38) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 16:49:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) socket$inet6_tcp(0xa, 0x1, 0x0) [ 227.064435][ T8572] hfs: can't find a HFS filesystem on dev loop2 [ 227.084917][ T8578] hfs: can't find a HFS filesystem on dev loop1 16:49:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) setresgid(0x0, 0x0, 0x0) 16:49:04 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 227.458870][ T8604] hfs: can't find a HFS filesystem on dev loop2 16:49:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) 16:49:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150b99a283ff07b8008000000000000000250040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x200000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0xfffffffe}) 16:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:04 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 227.600225][ T8618] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 227.609713][ T8618] __nla_validate_parse: 131 callbacks suppressed [ 227.609751][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:49:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 227.664726][ T8618] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 227.680433][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:49:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150b99a283ff07b8008000000000000000250040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x200000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0xfffffffe}) 16:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) [ 227.799253][ T8634] hfs: can't find a HFS filesystem on dev loop2 [ 227.885753][ T8642] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 227.894407][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:49:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b1b28309b334d", 0xff8d}], 0x1) 16:49:04 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@dir_umask={'dir_umask'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 227.931039][ T8642] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 227.940772][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:49:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 16:49:04 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 228.037177][ T28] audit: type=1800 audit(1596386944.873:7): pid=8639 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15838 res=0 errno=0 16:49:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) 16:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) [ 228.171760][ T8655] hfs: can't find a HFS filesystem on dev loop2 16:49:05 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:49:05 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 228.454676][ T8682] hfs: unable to change iocharset [ 228.454685][ T8682] hfs: unable to parse mount options 16:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:05 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) 16:49:05 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:49:05 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 228.704001][ T8697] hfs: unable to change iocharset [ 228.704011][ T8697] hfs: unable to parse mount options 16:49:05 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) 16:49:05 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:08 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @rand_addr=0x640100ff}, 0x10) 16:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:08 executing program 2: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 16:49:08 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) 16:49:08 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:08 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) [ 231.228195][ T8741] hfs: unable to change iocharset 16:49:08 executing program 0: r0 = open(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 231.253669][ T8741] hfs: unable to parse mount options 16:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3000, 0x4000, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa101}) openat$vga_arbiter(0xffffff9c, 0x0, 0x0, 0x0) 16:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc008ae91, 0x0) 16:49:08 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) 16:49:08 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 16:49:08 executing program 0: r0 = open(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:08 executing program 2: 16:49:08 executing program 0: r0 = open(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:08 executing program 5: 16:49:08 executing program 1: 16:49:08 executing program 5: 16:49:08 executing program 2: 16:49:08 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:08 executing program 1: 16:49:08 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:08 executing program 2: 16:49:08 executing program 5: 16:49:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:08 executing program 1: 16:49:08 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 2: 16:49:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:09 executing program 5: 16:49:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 1: 16:49:09 executing program 5: 16:49:09 executing program 2: 16:49:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 1: 16:49:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:09 executing program 2: 16:49:09 executing program 5: 16:49:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 5: 16:49:09 executing program 1: 16:49:09 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 2: 16:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:09 executing program 2: 16:49:09 executing program 1: 16:49:09 executing program 5: 16:49:09 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 1: 16:49:09 executing program 2: 16:49:09 executing program 5: 16:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:09 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:09 executing program 2: 16:49:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:10 executing program 1: 16:49:10 executing program 5: 16:49:10 executing program 2: 16:49:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:10 executing program 2: 16:49:10 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:10 executing program 1: 16:49:10 executing program 5: 16:49:10 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:10 executing program 5: 16:49:10 executing program 1: 16:49:10 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:10 executing program 2: 16:49:10 executing program 5: 16:49:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:10 executing program 1: 16:49:10 executing program 5: 16:49:10 executing program 1: 16:49:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:10 executing program 2: 16:49:10 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:10 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:10 executing program 5: 16:49:10 executing program 2: syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4}}}, 0x8) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000a40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_info_req={{0xa, 0x7, 0x2}, {0x4}}, @l2cap_info_rsp={{0xb, 0x2, 0x62}, {0x2, 0x7f, "a762568db586902acb90e90bf570e7129709f764c121a71c8153f61a2addbb2d244a485f0702f02c370a48c6a8b49ba42c1cb5c4b68b03040fd65d53da7c70963868a383482c2c2bcd862030b70efda05f3286efc488e82da0d814e2aeb7"}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x3, 0x1}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x5}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x8, 0x3340}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x800}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x0, 0x4}}, @l2cap_move_chan_req={{0xe, 0x40, 0x3}, {0x2, 0xcf}}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x21b}}]}}, 0xa8) syz_emit_vhci(&(0x7f0000000b40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x7, @none, "5dff077d30d5b9a11720fe0d670ad533487c1948ad4a85d2d7832f0c4d2a65ca2191db16ae1f310f93289e6d6f5f1e436ef4dd2b971aa9d77f64599479658fb352017c7b2f112fc97663e28a22de45a17a351726ae260d45ae45ca95ed8dfa56a1d7bd768e72e87611b168656da11555112d73e8d0abdb98ff0c2703eb1d4b5df9d17e4f7995067023aab2cb548be1928e9d80d6845cd08feec6cfd4bf81dbe488dc29121e0a4d07b9218d892e4eea8be2369a5d0a3d32f83a116d30d44e4a7027e63413b6fb5bac57e7a349c6754579bc3639be3368610cc00384bbb756550d608e95c095cf931b63171546d4c5a81eec53283e02ab30a4"}}}, 0x102) 16:49:10 executing program 1: syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc8, 0x0, 0x0, @none}}}}, 0x16) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x5e}}}, 0x6) 16:49:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) [ 234.005479][ T1545] debugfs: Directory '200' with parent 'hci2' already present! [ 234.013791][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 234.026341][ T1545] CPU: 1 PID: 1545 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 234.035994][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.046061][ T1545] Workqueue: hci2 hci_rx_work [ 234.050733][ T1545] Call Trace: [ 234.054014][ T1545] dump_stack+0x18f/0x20d [ 234.058335][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 234.063261][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 234.068359][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 234.073888][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 234.078814][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 234.084000][ T1545] kobject_add_internal+0x2c3/0x940 [ 234.089182][ T1545] kobject_add+0x150/0x1c0 [ 234.093582][ T1545] ? kset_create_and_add+0x190/0x190 [ 234.098854][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 234.104383][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 234.109667][ T1545] ? device_add+0x33b/0x1c40 [ 234.114242][ T1545] device_add+0x35a/0x1c40 [ 234.118655][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 234.124022][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 234.129635][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 234.135089][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 234.139927][ T1545] le_conn_complete_evt+0xc09/0x1740 [ 234.145202][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 234.151772][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 234.157738][ T1545] hci_le_meta_evt+0xe55/0x3fd0 [ 234.162660][ T1545] ? find_held_lock+0x2d/0x110 [ 234.167421][ T1545] ? mark_lock+0xbc/0x1710 [ 234.171823][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 234.178654][ T1545] ? mark_lock+0xbc/0x1710 [ 234.183054][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.188065][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.193080][ T1545] hci_event_packet+0x2e25/0x87a8 [ 234.198093][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 234.204055][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.209082][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 234.214637][ T1545] ? lock_acquire+0x1f1/0xad0 [ 234.219306][ T1545] ? skb_dequeue+0x1c/0x180 [ 234.223803][ T1545] ? find_held_lock+0x2d/0x110 [ 234.228555][ T1545] ? mark_lock+0xbc/0x1710 [ 234.232976][ T1545] ? mark_held_locks+0x9f/0xe0 [ 234.237742][ T1545] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 234.243545][ T1545] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 234.249514][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 234.254524][ T1545] ? lockdep_hardirqs_on+0x76/0xf0 [ 234.259627][ T1545] hci_rx_work+0x22e/0xb50 [ 234.264037][ T1545] process_one_work+0x94c/0x1670 [ 234.268963][ T1545] ? lock_release+0x8e0/0x8e0 [ 234.273641][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 234.279003][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 234.283923][ T1545] ? lockdep_hardirqs_off+0x7e/0xb0 [ 234.289125][ T1545] worker_thread+0x64c/0x1120 [ 234.293794][ T1545] ? process_one_work+0x1670/0x1670 [ 234.298978][ T1545] kthread+0x3b5/0x4a0 16:49:11 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 234.303028][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 234.308140][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 234.313237][ T1545] ret_from_fork+0x1f/0x30 [ 234.326830][ T1545] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.341938][ T1545] Bluetooth: hci2: failed to register connection device [ 234.365528][ T1545] debugfs: Directory '200' with parent 'hci2' already present! [ 234.373586][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 234.386263][ T1545] CPU: 1 PID: 1545 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 234.395908][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.405985][ T1545] Workqueue: hci2 hci_rx_work [ 234.410675][ T1545] Call Trace: [ 234.413978][ T1545] dump_stack+0x18f/0x20d [ 234.418325][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 234.423277][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 234.428408][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 234.433971][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 234.438932][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 234.444157][ T1545] kobject_add_internal+0x2c3/0x940 [ 234.449377][ T1545] kobject_add+0x150/0x1c0 [ 234.453813][ T1545] ? kset_create_and_add+0x190/0x190 [ 234.459117][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 234.464681][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 234.469979][ T1545] ? device_add+0x33b/0x1c40 [ 234.474590][ T1545] device_add+0x35a/0x1c40 [ 234.479024][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 234.484404][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 234.490047][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 234.495521][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 234.500383][ T1545] le_conn_complete_evt+0xc09/0x1740 [ 234.505688][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 234.512290][ T1545] ? try_to_wake_up+0x98/0x12b0 [ 234.517152][ T1545] ? find_held_lock+0x2d/0x110 [ 234.521922][ T1545] ? try_to_wake_up+0xcc/0x12b0 [ 234.526807][ T1545] hci_le_meta_evt+0xe55/0x3fd0 [ 234.531675][ T1545] ? mark_lock+0xbc/0x1710 [ 234.536105][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 234.542962][ T1545] ? mark_lock+0xbc/0x1710 [ 234.547389][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.552426][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.557466][ T1545] hci_event_packet+0x2e25/0x87a8 [ 234.562505][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 234.568491][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 234.573527][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 234.579084][ T1545] ? lock_acquire+0x1f1/0xad0 [ 234.583764][ T1545] ? skb_dequeue+0x1c/0x180 [ 234.588280][ T1545] ? find_held_lock+0x2d/0x110 [ 234.593052][ T1545] ? mark_lock+0xbc/0x1710 [ 234.597504][ T1545] ? mark_held_locks+0x9f/0xe0 [ 234.602277][ T1545] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 234.608092][ T1545] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 234.614080][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 234.619118][ T1545] ? lockdep_hardirqs_on+0x76/0xf0 [ 234.624240][ T1545] hci_rx_work+0x22e/0xb50 [ 234.628674][ T1545] process_one_work+0x94c/0x1670 [ 234.633626][ T1545] ? lock_release+0x8e0/0x8e0 [ 234.638311][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 234.643695][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 234.648642][ T1545] ? lockdep_hardirqs_off+0x7e/0xb0 [ 234.653858][ T1545] worker_thread+0x64c/0x1120 [ 234.658558][ T1545] ? process_one_work+0x1670/0x1670 16:49:11 executing program 2: 16:49:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:11 executing program 2: [ 234.663779][ T1545] kthread+0x3b5/0x4a0 [ 234.667859][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 234.672979][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 234.678100][ T1545] ret_from_fork+0x1f/0x30 [ 234.684242][ T8127] Bluetooth: Wrong link type (-22) [ 234.689741][ T8127] Bluetooth: Wrong link type (-22) 16:49:11 executing program 5: 16:49:11 executing program 1: 16:49:11 executing program 2: syz_emit_vhci(&(0x7f0000001640)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term}}, 0x9) [ 234.704390][ T1545] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.718370][ T1545] Bluetooth: hci2: failed to register connection device 16:49:11 executing program 1: syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x0, 0x0, @none, 0x0, @fixed}}}}, 0x14) 16:49:11 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x1, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @fixed}]}}}}, 0x1d) 16:49:11 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e610d02f3150000ffffffffffff000000000800000000000000000020"], 0x64) 16:49:11 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 235.044574][ T1545] Bluetooth: hci1: Unknown advertising packet type: 0x15f3 [ 235.044624][ T1545] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 235.079405][ T1545] Bluetooth: hci1: Unknown advertising packet type: 0x15f3 16:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:12 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x10}}}, 0x5) 16:49:12 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:12 executing program 5: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{}, {0x5}}}}, 0xf) 16:49:12 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8, 0xfffb}]}}}, 0x8) 16:49:12 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:12 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0xdb}, {}]}}}, 0xc) 16:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:12 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x1f78f5eb5f03ceb6, 0x0, @none}]}}}}, 0xf) 16:49:12 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "0e5263"}}}, 0xd) 16:49:12 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) mkdir(&(0x7f00000000c0)='./file1/file0\x00', 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) 16:49:12 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) [ 235.086644][ T1545] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 235.440027][ T1545] Bluetooth: hci2: unknown advertising packet type: 0xb6 16:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) 16:49:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc8, 0x1, 0x0, @fixed, @fixed={[], 0x12}, @any, 0x81, 0x7ff, 0x3, 0x1}}}}, 0x22) 16:49:12 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting}}, 0x9) 16:49:12 executing program 2: syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x1, 0x0, @none, 0x0, @fixed}}}}, 0x14) [ 235.447228][ T1545] Bluetooth: hci2: unknown advertising packet type: 0xb6 [ 235.666525][ T1545] debugfs: Directory '200' with parent 'hci2' already present! [ 235.682251][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 235.691904][ T1545] CPU: 0 PID: 1545 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 235.701543][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.711615][ T1545] Workqueue: hci2 hci_rx_work 16:49:12 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 16:49:12 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x3, 0x4}}]}}, 0x11) [ 235.716300][ T1545] Call Trace: [ 235.719603][ T1545] dump_stack+0x18f/0x20d [ 235.723953][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 235.728916][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 235.734042][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 235.739598][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 235.744553][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 235.749772][ T1545] kobject_add_internal+0x2c3/0x940 [ 235.754985][ T1545] kobject_add+0x150/0x1c0 [ 235.759412][ T1545] ? kset_create_and_add+0x190/0x190 [ 235.764716][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 235.770279][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 235.775571][ T1545] ? device_add+0x33b/0x1c40 [ 235.780171][ T1545] device_add+0x35a/0x1c40 [ 235.784597][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 235.789979][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 235.795621][ T1545] ? __init_waitqueue_head+0x97/0x110 [ 235.801004][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 235.806480][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 235.811345][ T1545] le_conn_complete_evt+0xc09/0x1740 16:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [0xc0000100, 0x0, 0x3, 0x8, 0xe1]}) [ 235.816665][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 235.823264][ T1545] ? debug_check_no_obj_freed+0x20c/0x41c [ 235.828999][ T1545] hci_le_meta_evt+0x16cf/0x3fd0 [ 235.833952][ T1545] ? mark_lock+0xbc/0x1710 [ 235.838380][ T1545] ? mark_lock+0xbc/0x1710 [ 235.842812][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 235.849673][ T1545] ? mark_lock+0xbc/0x1710 [ 235.854100][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 235.859141][ T1545] ? __lock_acquire+0x16cb/0x5640 16:49:12 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2068, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1/file0/file0\x00', 0x0) [ 235.864191][ T1545] hci_event_packet+0x2e25/0x87a8 [ 235.869231][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 235.875221][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 235.880268][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 235.885827][ T1545] ? lock_acquire+0x1f1/0xad0 [ 235.890519][ T1545] ? skb_dequeue+0x1c/0x180 [ 235.895032][ T1545] ? find_held_lock+0x2d/0x110 [ 235.899806][ T1545] ? mark_lock+0xbc/0x1710 [ 235.904235][ T1545] ? mark_held_locks+0x9f/0xe0 [ 235.909011][ T1545] ? _raw_spin_unlock_irqrestore+0x62/0xe0 16:49:12 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040efc05140c"], 0xff) [ 235.914829][ T1545] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 235.920836][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 235.925879][ T1545] ? lockdep_hardirqs_on+0x76/0xf0 [ 235.931001][ T1545] hci_rx_work+0x22e/0xb50 [ 235.935433][ T1545] process_one_work+0x94c/0x1670 [ 235.940384][ T1545] ? lock_release+0x8e0/0x8e0 [ 235.945073][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 235.950457][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 235.955405][ T1545] ? lockdep_hardirqs_off+0x7e/0xb0 [ 235.960619][ T1545] worker_thread+0x64c/0x1120 16:49:12 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, 0x0, 0x2) [ 235.965315][ T1545] ? process_one_work+0x1670/0x1670 [ 235.970512][ T1545] kthread+0x3b5/0x4a0 [ 235.974566][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 235.979676][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 235.984774][ T1545] ret_from_fork+0x1f/0x30 [ 236.001813][ T1545] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 236.024122][ T1545] Bluetooth: hci2: failed to register connection device [ 236.032775][ T1545] debugfs: Directory '200' with parent 'hci2' already present! [ 236.040922][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 236.051020][ T1545] CPU: 1 PID: 1545 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 236.060657][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.070725][ T1545] Workqueue: hci2 hci_rx_work [ 236.075409][ T1545] Call Trace: [ 236.078710][ T1545] dump_stack+0x18f/0x20d [ 236.083054][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 236.088004][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 236.093125][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 236.098680][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 236.103630][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 236.108844][ T1545] kobject_add_internal+0x2c3/0x940 [ 236.114059][ T1545] kobject_add+0x150/0x1c0 [ 236.118481][ T1545] ? kset_create_and_add+0x190/0x190 [ 236.123780][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 236.129340][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 236.134625][ T1545] ? device_add+0x33b/0x1c40 [ 236.139225][ T1545] device_add+0x35a/0x1c40 [ 236.143649][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 236.149016][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 236.154651][ T1545] ? __init_waitqueue_head+0x97/0x110 [ 236.162206][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 236.167681][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 236.172552][ T1545] le_conn_complete_evt+0xc09/0x1740 [ 236.177857][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 236.184484][ T1545] ? debug_check_no_obj_freed+0x20c/0x41c [ 236.190221][ T1545] hci_le_meta_evt+0x16cf/0x3fd0 [ 236.195176][ T1545] ? mark_lock+0xbc/0x1710 [ 236.199610][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 236.206472][ T1545] ? mark_lock+0xbc/0x1710 [ 236.210900][ T1545] ? lock_is_held_type+0xbb/0xf0 [ 236.215841][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 236.220863][ T1545] hci_event_packet+0x2e25/0x87a8 [ 236.225884][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 236.231853][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 236.236867][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 236.242397][ T1545] ? lock_acquire+0x1f1/0xad0 [ 236.247057][ T1545] ? skb_dequeue+0x1c/0x180 [ 236.251544][ T1545] ? find_held_lock+0x2d/0x110 [ 236.256292][ T1545] ? mark_lock+0xbc/0x1710 [ 236.260698][ T1545] ? mark_held_locks+0x9f/0xe0 [ 236.265459][ T1545] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 236.271247][ T1545] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 236.277479][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 236.282487][ T1545] ? lockdep_hardirqs_on+0x76/0xf0 [ 236.287585][ T1545] hci_rx_work+0x22e/0xb50 [ 236.291993][ T1545] process_one_work+0x94c/0x1670 [ 236.297010][ T1545] ? lock_release+0x8e0/0x8e0 [ 236.301670][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 236.307027][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 236.311950][ T1545] ? lockdep_hardirqs_off+0x7e/0xb0 [ 236.317133][ T1545] worker_thread+0x64c/0x1120 16:49:13 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy}}, 0xb) [ 236.321800][ T1545] ? process_one_work+0x1670/0x1670 [ 236.326980][ T1545] kthread+0x3b5/0x4a0 [ 236.331031][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 236.336125][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 236.341236][ T1545] ret_from_fork+0x1f/0x30 [ 236.355163][ T1545] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. 16:49:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy}}, 0x9) 16:49:13 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, 0x0, 0x2) [ 236.369220][ T1545] Bluetooth: hci2: failed to register connection device [ 236.380541][ T17] Bluetooth: hci2: command 0x2016 tx timeout 16:49:13 executing program 2: syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc8, 0x0, 0x0, @none}}}}, 0x16) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0xc8, 0xff}}}, 0x7) 16:49:13 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x428}}}, 0x7) [ 236.496776][ T1545] debugfs: Directory '200' with parent 'hci1' already present! [ 236.505380][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 236.516499][ T1545] CPU: 1 PID: 1545 Comm: kworker/u5:0 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 236.526154][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.536222][ T1545] Workqueue: hci1 hci_rx_work [ 236.541007][ T1545] Call Trace: [ 236.544306][ T1545] dump_stack+0x18f/0x20d [ 236.548656][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 236.553606][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 236.558726][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 236.564287][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 236.569235][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 236.574452][ T1545] kobject_add_internal+0x2c3/0x940 [ 236.579665][ T1545] kobject_add+0x150/0x1c0 [ 236.584092][ T1545] ? kset_create_and_add+0x190/0x190 [ 236.589389][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 236.594944][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 236.600237][ T1545] ? device_add+0x33b/0x1c40 [ 236.604846][ T1545] device_add+0x35a/0x1c40 [ 236.609275][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 236.614654][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 236.620293][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 236.625763][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 236.630633][ T1545] le_conn_complete_evt+0xc09/0x1740 [ 236.635941][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 236.642533][ T1545] ? debug_check_no_obj_freed+0x20c/0x41c [ 236.648269][ T1545] hci_le_meta_evt+0xe55/0x3fd0 [ 236.653136][ T1545] ? mark_lock+0xbc/0x1710 [ 236.657561][ T1545] ? mark_lock+0xbc/0x1710 [ 236.661992][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 236.668850][ T1545] ? mark_lock+0xbc/0x1710 [ 236.673280][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 236.678326][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 236.683373][ T1545] hci_event_packet+0x2e25/0x87a8 [ 236.688416][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 236.694418][ T1545] ? __lock_acquire+0x16cb/0x5640 [ 236.699464][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 236.705027][ T1545] ? lock_acquire+0x1f1/0xad0 [ 236.709712][ T1545] ? skb_dequeue+0x1c/0x180 [ 236.714226][ T1545] ? find_held_lock+0x2d/0x110 [ 236.719002][ T1545] ? mark_lock+0xbc/0x1710 [ 236.723430][ T1545] ? mark_held_locks+0x9f/0xe0 [ 236.728203][ T1545] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 236.734020][ T1545] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 236.740002][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 236.745045][ T1545] ? lockdep_hardirqs_on+0x76/0xf0 [ 236.750173][ T1545] hci_rx_work+0x22e/0xb50 [ 236.754612][ T1545] process_one_work+0x94c/0x1670 [ 236.759563][ T1545] ? lock_release+0x8e0/0x8e0 [ 236.764256][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 236.769644][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 236.774599][ T1545] ? lockdep_hardirqs_off+0x7e/0xb0 [ 236.779815][ T1545] worker_thread+0x64c/0x1120 [ 236.784507][ T1545] ? process_one_work+0x1670/0x1670 [ 236.789714][ T1545] kthread+0x3b5/0x4a0 [ 236.793789][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 236.798910][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 236.804032][ T1545] ret_from_fork+0x1f/0x30 [ 236.809188][ T8127] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 236.816815][ T1545] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 236.820905][ T8127] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 236.820920][ T8127] CPU: 1 PID: 8127 Comm: kworker/u5:2 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0 [ 236.820928][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.820941][ T8127] Workqueue: hci5 hci_rx_work [ 236.820962][ T8127] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x23e/0x790 [ 236.820976][ T8127] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3e 05 00 00 48 8b 9d 30 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 da 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 236.820989][ T8127] RSP: 0018:ffffc90016db7a38 EFLAGS: 00010202 [ 236.821002][ T8127] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8722a583 [ 236.821011][ T8127] RDX: 0000000000000002 RSI: ffffffff8722a590 RDI: 0000000000000010 [ 236.821020][ T8127] RBP: ffff88809e46a000 R08: 0000000000000001 R09: ffff88804ec16cc8 [ 236.821028][ T8127] R10: 0000000000000000 R11: 0000000000000178 R12: dffffc0000000000 [ 236.821037][ T8127] R13: ffff888058a61138 R14: ffff88809a28900b R15: 00000000000000c8 [ 236.821049][ T8127] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 236.821058][ T8127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.821066][ T8127] CR2: 000000000051b460 CR3: 000000009d857000 CR4: 00000000001526e0 [ 236.821084][ T8127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.834445][ T1545] Bluetooth: hci1: failed to register connection device [ 236.842718][ T8127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.842723][ T8127] Call Trace: [ 236.842744][ T8127] hci_event_packet+0x4696/0x87a8 [ 236.842762][ T8127] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 236.842774][ T8127] ? __lock_acquire+0x16c1/0x5640 [ 236.842794][ T8127] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 237.010579][ T8127] ? lock_acquire+0x1f1/0xad0 [ 237.015255][ T8127] ? skb_dequeue+0x1c/0x180 [ 237.019787][ T8127] ? find_held_lock+0x2d/0x110 [ 237.024548][ T8127] ? mark_lock+0xbc/0x1710 [ 237.028961][ T8127] ? mark_held_locks+0x9f/0xe0 [ 237.033707][ T8127] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 237.039509][ T8127] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 237.045570][ T8127] ? trace_hardirqs_on+0x5f/0x220 [ 237.050576][ T8127] ? lockdep_hardirqs_on+0x76/0xf0 [ 237.055668][ T8127] hci_rx_work+0x22e/0xb50 [ 237.060092][ T8127] process_one_work+0x94c/0x1670 [ 237.065014][ T8127] ? lock_release+0x8e0/0x8e0 [ 237.069673][ T8127] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 237.075042][ T8127] ? rwlock_bug.part.0+0x90/0x90 [ 237.079961][ T8127] ? lockdep_hardirqs_off+0x7e/0xb0 [ 237.085140][ T8127] worker_thread+0x64c/0x1120 [ 237.089802][ T8127] ? __kthread_parkme+0x13f/0x1e0 [ 237.094806][ T8127] ? process_one_work+0x1670/0x1670 [ 237.099982][ T8127] kthread+0x3b5/0x4a0 [ 237.104123][ T8127] ? __kthread_bind_mask+0xc0/0xc0 [ 237.109216][ T8127] ? __kthread_bind_mask+0xc0/0xc0 [ 237.114307][ T8127] ret_from_fork+0x1f/0x30 [ 237.118701][ T8127] Modules linked in: [ 237.124454][ T1545] debugfs: Directory '200' with parent 'hci1' already present! [ 237.133421][ T1545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 237.134002][ T8127] ---[ end trace c55c8d15890f0389 ]--- [ 237.142915][ T1545] CPU: 0 PID: 1545 Comm: kworker/u5:0 Tainted: G D 5.8.0-rc7-next-20200731-syzkaller #0 [ 237.142930][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.148382][ T8127] RIP: 0010:hci_phy_link_complete_evt.isra.0+0x23e/0x790 [ 237.159348][ T1545] Workqueue: hci1 hci_rx_work [ 237.159356][ T1545] Call Trace: [ 237.159373][ T1545] dump_stack+0x18f/0x20d [ 237.159396][ T1545] sysfs_warn_dup.cold+0x1c/0x2d [ 237.169445][ T8127] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3e 05 00 00 48 8b 9d 30 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 da 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 237.176432][ T1545] sysfs_create_dir_ns+0x233/0x290 [ 237.176446][ T1545] ? sysfs_create_mount_point+0xb0/0xb0 [ 237.176458][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 237.176478][ T1545] ? do_raw_spin_unlock+0x171/0x230 [ 237.181169][ T8127] RSP: 0018:ffffc90016db7a38 EFLAGS: 00010202 [ 237.184415][ T1545] kobject_add_internal+0x2c3/0x940 [ 237.193613][ T1545] kobject_add+0x150/0x1c0 [ 237.193625][ T1545] ? kset_create_and_add+0x190/0x190 [ 237.193648][ T1545] ? lockdep_init_map_waits+0x26a/0x8a0 [ 237.213259][ T8127] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8722a583 [ 237.218345][ T1545] ? __raw_spin_lock_init+0x34/0x100 [ 237.223935][ T8127] RDX: 0000000000000002 RSI: ffffffff8722a590 RDI: 0000000000000010 [ 237.228807][ T1545] ? device_add+0x33b/0x1c40 [ 237.235636][ T8127] RBP: ffff88809e46a000 R08: 0000000000000001 R09: ffff88804ec16cc8 [ 237.240032][ T1545] device_add+0x35a/0x1c40 [ 237.245223][ T8127] R10: 0000000000000000 R11: 0000000000000178 R12: dffffc0000000000 [ 237.249595][ T1545] ? devlink_add_symlinks+0x450/0x450 [ 237.254874][ T8127] R13: ffff888058a61138 R14: ffff88809a28900b R15: 00000000000000c8 [ 237.260362][ T1545] ? hci_debugfs_create_conn+0x179/0x1f0 [ 237.260375][ T1545] ? hci_debugfs_create_le+0x850/0x850 [ 237.260390][ T1545] hci_conn_add_sysfs+0x84/0xe0 [ 237.260411][ T1545] le_conn_complete_evt+0xc09/0x1740 [ 237.268354][ T8127] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 237.273627][ T1545] ? hci_remote_ext_features_evt.isra.0+0xd30/0xd30 [ 237.273643][ T1545] ? lock_acquire+0x1f1/0xad0 [ 237.273654][ T1545] ? debug_object_activate+0x12e/0x3e0 [ 237.273674][ T1545] hci_le_meta_evt+0xe55/0x3fd0 [ 237.281630][ T8127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.286202][ T1545] ? hci_key_refresh_complete_evt.isra.0+0x10b0/0x10b0 [ 237.294162][ T8127] CR2: 00007ffe50fb7ff0 CR3: 00000000a825c000 CR4: 00000000001526e0 [ 237.298548][ T1545] hci_event_packet+0x2e25/0x87a8 [ 237.306508][ T8127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.311836][ T1545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 237.311853][ T1545] ? hci_cmd_complete_evt+0xc6d0/0xc6d0 [ 237.311872][ T1545] ? lock_acquire+0x1f1/0xad0 [ 237.319814][ T8127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.325413][ T1545] ? skb_dequeue+0x1c/0x180 [ 237.325430][ T1545] ? lock_downgrade+0x830/0x830 [ 237.325450][ T1545] ? lock_acquire+0x1f1/0xad0 [ 237.330895][ T8127] Kernel panic - not syncing: Fatal exception [ 237.335701][ T1545] ? process_one_work+0x85f/0x1670 [ 237.455925][ T1545] ? trace_hardirqs_on+0x5f/0x220 [ 237.460935][ T1545] hci_rx_work+0x22e/0xb50 [ 237.465353][ T1545] process_one_work+0x94c/0x1670 [ 237.470275][ T1545] ? lock_release+0x8e0/0x8e0 [ 237.474936][ T1545] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 237.480289][ T1545] ? rwlock_bug.part.0+0x90/0x90 [ 237.485211][ T1545] worker_thread+0x64c/0x1120 [ 237.489871][ T1545] ? process_one_work+0x1670/0x1670 [ 237.495048][ T1545] kthread+0x3b5/0x4a0 [ 237.499099][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 237.504189][ T1545] ? __kthread_bind_mask+0xc0/0xc0 [ 237.509284][ T1545] ret_from_fork+0x1f/0x30 [ 237.514918][ T8127] Kernel Offset: disabled [ 237.519286][ T8127] Rebooting in 86400 seconds..