[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.098725][ T26] audit: type=1800 audit(1561827162.568:25): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.133903][ T26] audit: type=1800 audit(1561827162.568:26): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.182839][ T26] audit: type=1800 audit(1561827162.568:27): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. 2019/06/29 16:52:53 fuzzer started 2019/06/29 16:52:55 dialing manager at 10.128.0.26:44829 2019/06/29 16:52:56 syscalls: 2465 2019/06/29 16:52:56 code coverage: enabled 2019/06/29 16:52:56 comparison tracing: enabled 2019/06/29 16:52:56 extra coverage: extra coverage is not supported by the kernel 2019/06/29 16:52:56 setuid sandbox: enabled 2019/06/29 16:52:56 namespace sandbox: enabled 2019/06/29 16:52:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/29 16:52:56 fault injection: enabled 2019/06/29 16:52:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/29 16:52:56 net packet injection: enabled 2019/06/29 16:52:56 net device setup: enabled 16:55:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) syzkaller login: [ 233.047841][ T9118] IPVS: ftp: loaded support on port[0] = 21 16:55:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) [ 233.205513][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 233.258761][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.267591][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.277811][ T9118] device bridge_slave_0 entered promiscuous mode [ 233.295446][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.312823][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.321768][ T9118] device bridge_slave_1 entered promiscuous mode [ 233.346280][ T9121] IPVS: ftp: loaded support on port[0] = 21 [ 233.362021][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.373345][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.407871][ T9118] team0: Port device team_slave_0 added [ 233.417797][ T9118] team0: Port device team_slave_1 added 16:55:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") poll(&(0x7f0000000100)=[{r0}], 0x1, 0x7) [ 233.544880][ T9118] device hsr_slave_0 entered promiscuous mode [ 233.581923][ T9118] device hsr_slave_1 entered promiscuous mode [ 233.656615][ T9123] IPVS: ftp: loaded support on port[0] = 21 [ 233.701448][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.708727][ T9118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.716586][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.723711][ T9118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.744614][ T9121] chnl_net:caif_netlink_parms(): no params data found 16:55:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) gettid() pipe(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) [ 233.896306][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.907014][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.919992][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.929842][ T9121] device bridge_slave_0 entered promiscuous mode [ 233.954881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.969006][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.002344][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.013992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.029773][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.040345][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.048153][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.058929][ T9121] device bridge_slave_1 entered promiscuous mode [ 234.161990][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.165592][ T9129] IPVS: ftp: loaded support on port[0] = 21 [ 234.175595][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 234.195444][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.204012][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state 16:55:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x584}], 0x133, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) [ 234.211083][ T9125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.218887][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.227555][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.234688][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.256288][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.289805][ T9118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.300929][ T9118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.313834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.323497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.332180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.341250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.353856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.363593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.375664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.385374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.445074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.454831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.471543][ T9121] team0: Port device team_slave_0 added [ 234.495894][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.515115][ T9121] team0: Port device team_slave_1 added [ 234.577570][ T9133] IPVS: ftp: loaded support on port[0] = 21 [ 234.587983][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.595570][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.612948][ T9123] device bridge_slave_0 entered promiscuous mode 16:55:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x400000002) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x100000000002, {{0x2, 0x0, @rand_addr=0xffffffffedddb9a5}}}, 0x88) [ 234.653143][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.660413][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.674143][ T9123] device bridge_slave_1 entered promiscuous mode [ 234.734990][ T9121] device hsr_slave_0 entered promiscuous mode [ 234.763383][ T9121] device hsr_slave_1 entered promiscuous mode [ 234.840433][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.881716][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.894349][ T9139] IPVS: ftp: loaded support on port[0] = 21 16:55:32 executing program 0: socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x29, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x5, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x80000000000004, @perf_bp={0x0}, 0x10, 0x1ffc0000000, 0x5, 0x3, 0x2, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x200b) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000000)="1be72113365e38fedd2918e970860d1a33009cb0923107aa07ac2c07a7136552bd60b5af903fd5f4cad58456", 0x2c) [ 234.977544][ T9123] team0: Port device team_slave_0 added [ 235.044983][ T9123] team0: Port device team_slave_1 added [ 235.066149][ T9129] chnl_net:caif_netlink_parms(): no params data found 16:55:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300034, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/72) [ 235.152949][ C0] hrtimer: interrupt took 33874 ns [ 235.161193][ T9123] device hsr_slave_0 entered promiscuous mode [ 235.215025][ T9123] device hsr_slave_1 entered promiscuous mode 16:55:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0xffffffffffffffc4, 0xfffffffffffffff8, 0x3, 0xf6e8, 0x5, 0x8, 0x7, 0x1860000000000000, 0x4, 0x80000001, 0x80, 0xfffffffffffffffa, 0x5800000000000, 0x400, 0x2]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r2, 0xdc, "eb3d7dac6ae397695b74b38d29ccd900d6b3b88b37a2b89a566a666bb988d73f127525b06a7c76912d437e81faeccd8fc415fa6b262d8bedbc3b550cc706a0a8b5cee074fdfbbad862d8594f2a2c04e04b065b14dea44351bcc28a42d9dc9e499f8d2ca0c92bff88c52030f745f70d7a76e37b3b710026f4ac67f24dac73e23856b5e25d82b07728482927a387802088bfa0284633de8d96a8068d63b37533aac91cb4614396fd59fdbf2458d042ac7066e2fbc871cf3f27e866991e8dddfb8d47cd70128a1ba28e5b1dcaf139ce9824b9c080e4b249e244fe82ea8e"}, &(0x7f0000000340)=0xe4) [ 235.457428][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.464793][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.473871][ T9129] device bridge_slave_0 entered promiscuous mode 16:55:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa60838df3f7b516b, &(0x7f00000025c0)=0x802, 0xffffffffffffff0b) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000300)=0x5) fstat(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getflags(r1, 0x8000001) r5 = fanotify_init(0x8, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) fanotify_mark(r5, 0x100000000000001, 0x8000001, r3, &(0x7f00000001c0)='./file0\x00') ftruncate(r5, 0x5) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d17330f963d08"]) sendto$inet(r0, 0x0, 0x119, 0x10200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r6 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r6) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 235.506323][ T9129] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.513940][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.527088][ T9129] device bridge_slave_1 entered promiscuous mode [ 235.598848][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 235.623355][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.690492][ T9129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.748148][ T9160] hfs: creator requires a 4 character value [ 235.756631][ T9160] hfs: unable to parse mount options [ 235.777894][ T9129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.811359][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 235.847348][ T9129] team0: Port device team_slave_0 added [ 235.857141][ T9129] team0: Port device team_slave_1 added [ 235.870462][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.878716][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.887833][ T9133] device bridge_slave_0 entered promiscuous mode [ 235.941297][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.949858][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.958435][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.966351][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.974460][ T9133] device bridge_slave_1 entered promiscuous mode [ 236.073882][ T9129] device hsr_slave_0 entered promiscuous mode [ 236.112208][ T9129] device hsr_slave_1 entered promiscuous mode [ 236.164580][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.174799][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.197196][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.207764][ T9133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.219282][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.226753][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.234862][ T9139] device bridge_slave_0 entered promiscuous mode [ 236.268158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.277646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.286883][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.294029][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.302009][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.309083][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.317310][ T9139] device bridge_slave_1 entered promiscuous mode [ 236.343630][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.358677][ T9133] team0: Port device team_slave_0 added [ 236.365728][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:55:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa60838df3f7b516b, &(0x7f00000025c0)=0x802, 0xffffffffffffff0b) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000300)=0x5) fstat(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getflags(r1, 0x8000001) r5 = fanotify_init(0x8, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) fanotify_mark(r5, 0x100000000000001, 0x8000001, r3, &(0x7f00000001c0)='./file0\x00') ftruncate(r5, 0x5) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d17330f963d08"]) sendto$inet(r0, 0x0, 0x119, 0x10200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r6 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r6) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 236.402599][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.410605][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.433901][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.457413][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.469174][ T9133] team0: Port device team_slave_1 added [ 236.489028][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.516846][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.528900][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.536588][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.546956][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.559313][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.576350][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.609770][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.621000][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.628740][ T9127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.774681][ T9172] hfs: creator requires a 4 character value [ 236.782662][ T9172] hfs: unable to parse mount options [ 236.797105][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.807294][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.817062][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.826305][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.833511][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.842740][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.851837][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.861112][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.887836][ T9139] team0: Port device team_slave_0 added 16:55:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa60838df3f7b516b, &(0x7f00000025c0)=0x802, 0xffffffffffffff0b) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000300)=0x5) fstat(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getflags(r1, 0x8000001) r5 = fanotify_init(0x8, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) fanotify_mark(r5, 0x100000000000001, 0x8000001, r3, &(0x7f00000001c0)='./file0\x00') ftruncate(r5, 0x5) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d17330f963d08"]) sendto$inet(r0, 0x0, 0x119, 0x10200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r6 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r6) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 236.945097][ T9133] device hsr_slave_0 entered promiscuous mode [ 236.992099][ T9133] device hsr_slave_1 entered promiscuous mode [ 237.014416][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.024778][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.033837][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.044138][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.071838][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.080331][ T9139] team0: Port device team_slave_1 added [ 237.115387][ T9180] hfs: creator requires a 4 character value [ 237.123458][ T9180] hfs: unable to parse mount options [ 237.123664][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.147108][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.155962][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.164943][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.176052][ T9121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:55:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5153332cfee7be070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1}}], 0x8, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4100, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="7e95e7d660460751bb71f1a796d9d429e3e470be9d530e3a8fbb1c46101bd91517f2273d2ef18af9dd269863a38b4828c5b4e3b6b04fbba356c7cdaef29045ed5ae7fc635816b3281c62bd2737d63557884e4501f84439674ccef6b5efd9a1d618674f5425972172be5e9b2333331125d1de51e61aa49cb1f756a75dc5301bbcebd2bf25260319165e6d2ee22828040b64e2b5ce2906d7fc5288eefaa522935b3b493b738150f4609b67580e247e3449e733231b422ae6d66076dacdc33b9f55211165d500a0c046dbeb", 0xca) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000e40), 0x4) [ 237.258812][ T9129] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.309551][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.325153][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.333891][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.350601][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.360239][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.369394][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.378834][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.387701][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.396516][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.403650][ T9127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.412125][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.420953][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.429513][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.436636][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.485394][ T9139] device hsr_slave_0 entered promiscuous mode [ 237.522352][ T9139] device hsr_slave_1 entered promiscuous mode [ 237.599885][ T9123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.610685][ T9123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.637226][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.645810][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.657130][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.665847][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.674837][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.684189][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.692740][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.702058][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.756343][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.780308][ T9129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.791008][ T9129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.819599][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.836082][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.849350][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.858453][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.867337][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.876099][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.884719][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.893401][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.902004][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.910445][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.918662][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.935226][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.985261][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.003105][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.039235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.048781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.062789][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.075430][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.104499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.114972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.133113][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.161718][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.174156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.192242][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.199317][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.209602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.219001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.229956][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.237098][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.244877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.254065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.262638][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.270208][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.342049][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.350355][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.374308][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.403952][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.420889][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 16:55:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x2) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080)) r1 = socket(0x1000000000000010, 0x40000000080802, 0x0) write(r1, &(0x7f0000000000)="24000000580001000000f4f9002304000a04f511080001000201009f0800028001000000", 0x24) 16:55:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7839, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto(r2, &(0x7f0000000200), 0x40900, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000003060d01ff0488fffdffff57ffccad000c000100060d0010091900010c0402000000220109bd8381"], 0x2c}}, 0x0) exit_group(0x0) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, 0x0) [ 238.451243][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.458493][ T9125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.485987][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.500544][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.510016][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.534314][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.552562][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.578003][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.636869][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.645948][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.655527][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.667157][ T9225] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 238.677852][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.686111][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.706463][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.742641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.757626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.783097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.792247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.800739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.814409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.830690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.839923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.853758][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.869195][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.878930][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.889451][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.946036][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.959223][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 16:55:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x260002) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf250900000008000500020000001c000100080002008700000008000b0073697000080004004e24000024000100080004004e24000008000b0073697000080006006f766600080002003a00000008000400190e000020000300140002007465616d300000000000000000000000080007004e200000080006000500000008000500f7ffffff0800060009000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) sendmsg$nl_netfilter(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x510, 0x13, 0x9, 0x414, 0x70bd28, 0x25dfdbfe, {0xf, 0x0, 0x7}, [@generic="087f901458947506c45459f4595996c89e2901f390495d7f8ca076a689611edab52fa4da70b53f3d1ae893fc72413121757d0d107e0fc2e273311451c118a07fcf36507195008365f169ec716bd9570fc4fc152e2739ab0458ee0c4cce1e10f1659175dcef2eb60d95d240ffd1bae17a49c5ce21c5baf69f9ba500d04eafaedc0f53c44a2b6935cf0022aa32199310c4d4c9f5c1070ef31a7b2d02bd1d124ed9b432b1cf8d640ea4d9fc3951b4feae9b134d8f664e2c8ebae0a85773010c5bac30561649f5b038881226798563ee69d8f0b17d488915d3fdd324935cfdd33677dfe8b73960e76cf150fa187911c5bcb5acf6f6709933", @nested={0x114, 0x84, [@typed={0x8, 0x84, @u32=0x3f}, @typed={0x8, 0x43, @pid=r3}, @generic="98b5bc03c90c86fd4550ebf264b4d3fbd5292c9d3a84b9f8f10c639142e954b3d77777c77d66ce35f9fe23ce066733407ee3eb66b05d26a315ba90316d29d17589534eb88eb73308acf1a4101821", @generic="309e56b5ded11fcf6568dfefc7ef427e127f230dfe10975857c433d12388c909981bae11997346c2a726ee75c321f77085968458ec3ba7347d60", @generic="5a7f7cff31d735328b630566e02cf59f56ddd7dc7c518aebf666c2cef2fc65cbc50963f27f3c5c72fc4969d84b2727dfab59b7b115895107b268831554fdc0e9598a9b1f01d035e531fd95bd79dd5234f330a0eb07aaedd8f1968f02aa687f96cfcdbde117a36f0547933c0c48504dbe57d402003389e0"]}, @typed={0x60, 0x89, @binary="ac9d9fd41e0f4a154f7b0eb10d987cb0a98b9750b8e9970ad5a66ab7cdb0fa7791a9dff707dbd6fb433cbd527cc25fc0ca081c0dec5a40a78423a15a07d7f78bef4f3e82f393fe6c7346c7da380c8a631579afaeab6734ed93024296"}, @nested={0xc, 0x71, [@typed={0x8, 0x9, @pid=r4}]}, @nested={0xa8, 0x96, [@generic="0427313cf9c6c5fff8faed8203a10ce0fd434f04bae630419bb5552c36c2f09d2f7f5fd5ce38bc75fd6381f064e5064de545f2f9336be3c759de6cc00c5c128e4e74e70825ae6c91378312c0b87666d15153414fdcd0411ef4e289291ea12924eee38439a6ad9294ecf81b1b901030dcac4b918d4be1e8eac3409e03773d30bdd65af118624a96cb8ea97ef8b1c763b8dd861945c75a4e79fb653b7d3368f3d65c"]}, @generic="68fc5fcc21b823640e985910ed5abbd212ac322584fdb105d73817eebe014523a50b414cff1afcb1c331ba3fece086383fa64de82f202cdfa065d4d9658564b7073a15c73663d9f8912017c617d77c7bc3c434458f04dde8d9db4c045c0bb96a85378ea5c3944fc8e459da68c2e8806c6c981d7bddca1abce76b80fba8ec86cd17390a3e3fab4dad83faf5c1c0b848686eeae6cd0e71aa44978ad37c10063d627fcaf03bb49486a03e6d6168", @nested={0x130, 0x8b, [@generic="98a35b71a731182b5921cc0aea484bf7119e8ef0b3ece82b25eaef07e84185f3db3858bb58a449", @generic="3af275a82218cc3af0a630e48c38631acbb1c0a714b52ba5b5edd0b7b930cf053c52ecfcca80ded1726d2c37518d809fced1694c607157e8a7cf442ebdd2453512dc1a839e3b7c95601a1aade3c37a2a5197146977bf743f52bb9d8911d08f5f36803af6d249583384d3dd", @generic="fe41f19d32a715b5e39dda26d8a18597d0b08e863688008a33e224fce7fb09a9072a22a430079590be92e7f225fefa1c1b4384afcb5d1cff7ee8b1ac887c481c60099fe23e3f4af744ab9afebc982135031bc407e191f55f2ebd0ec1f238263897d65183cf863b6a8e0f659037e5ed2acd567f9cb144eab93479a09ec0acebff5c9bbd825f177f0de7aecd0d4f89bb20e89ae85389d8a5"]}]}, 0x510}, 0x1, 0x0, 0x0, 0x40080}, 0x40) syz_emit_ethernet(0x300300, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x2, "b40900", 0x300028, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 16:55:36 executing program 4: recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000002c0)=""/234, 0xea}], 0x2}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000140)=@buf={0x10, &(0x7f0000000500)="36c59aff4bcd19df74e53be9dedd3b34"}) r0 = socket$inet6(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 16:55:36 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20003, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80900, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x51a, 0x80000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4010744d, &(0x7f0000000200)) connect$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 16:55:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f00003b0000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x0, 0x6) 16:55:36 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/udmabuf\x00', 0x2) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)='{ppp0wlan1\x00', 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) dup3(r3, r1, 0x0) syz_open_dev$video4linux(&(0x7f0000000400)='/dev/v4l-subdev#\x00', 0x100, 0x2000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4) 16:55:36 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x10000000000002ac, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00000a2000/0x600000)=nil, 0x600000, 0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4$ax25(r3, &(0x7f0000000200)={{0x3, @rose}, [@bcast, @remote, @netrom, @null, @remote, @null, @remote, @default]}, &(0x7f0000000280)=0x48, 0x80800) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x341200, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r1, r1], 0x2) r5 = accept4$x25(r4, &(0x7f00000002c0), &(0x7f0000000140)=0x12, 0x80000) connect$x25(r5, &(0x7f0000000180)={0x9, @remote={[], 0x0}}, 0x12) 16:55:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/202) syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@nls={'nls', 0x3d, 'none'}}]}) 16:55:37 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x7a, 0xfffffffffffffffd, 0x6, 0x8, 0x0, 0x6, 0x3, 0x208, 0x40, 0x95, 0x6, 0x1, 0x38, 0x2, 0x8000, 0x1, 0x7}, [{0x70000000, 0x357, 0x9, 0x4, 0x800, 0x9bb0000000, 0x2d53b4f4, 0x1}], "5528a60746f42d0dd8337ff244d1cc54f5536c2469f92e72b37a1cb5aae5544b946f63e535852b01f3b2e812c1a8c480692e341c82381f8987bc75c1d257922a18a3c013024ce9a0aaa9d7941c7e85b105cc8b55431500ca538c19d92207ef47a129cb1b7fda39beeed58bc4870e9a312a1c9a5631ba3fc0ae3edeeece3516e34780f152809d279341d64dba34ab47eda0df6d36057dd6ff86972fd05f1ae1f1cc85dfa032f6f2885301617b10f9bdbc3902c04944698450f35276a4e47338ea3376a2ce83ab9aff6a74f4dcd09b5b2925f3", [[], [], [], []]}, 0x54a) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x1, 0x229) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000180)={@rand_addr, @local, @loopback}, &(0x7f00000001c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0xfffffffffffffffb, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x10000, 0x0) get_thread_area(&(0x7f0000000400)={0xec93, 0xffffffffffffffff, 0x400, 0x5, 0x6, 0x3ff, 0x0, 0x7ff, 0x4, 0x8981}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/156) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x22}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0x2, 0xffffffffffff0000, 0x1}) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000000)="c04facd5a8a5f1e81ca4f8391d55115eefac9ad8651bd2a02fcd58e027a0274cf0dca60f1509eca76625d9e874cde26dfe64288fafaf76b44b5205d672f8e8dd8dbc06bf6e75b8f225a55ff97e6c1f32349c523a4fc079fe9512b091ec86f584db46ebc7ae", 0x65) 16:55:37 executing program 4: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200028bd7000fcdbdf250c00000008000400090000012800030008000500ffffffff080001000100000014000600fe88000000000000000000000000010108000600b6b9000008000500ffffffff08000600ce020000"], 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x111a02, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x1, 0x2) 16:55:37 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x80000000}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = getuid() quotactl(0x5a4, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)="cbeb44a8baef22a5532afd2baa0092042ea15d5c8a538ac0c3f2222512d25c30c7f07fd2ab883b2998c907116eb57908155fc494ba75b76f802039388b4d3d6753533906ee75ed8c62a185340724fb9922b7fe77d57b209f9a0368be7b5fa9d2032d3b3600fd391d3e5e1d835227da2fb6c753752030764907ffaf7bd8e0d6bae8fff9824424658d6a4d6fde8e") [ 239.607264][ T9268] __ntfs_error: 3 callbacks suppressed [ 239.607280][ T9268] ntfs: (device loop3): parse_options(): NLS character set none not found. 16:55:37 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x7a, 0xfffffffffffffffd, 0x6, 0x8, 0x0, 0x6, 0x3, 0x208, 0x40, 0x95, 0x6, 0x1, 0x38, 0x2, 0x8000, 0x1, 0x7}, [{0x70000000, 0x357, 0x9, 0x4, 0x800, 0x9bb0000000, 0x2d53b4f4, 0x1}], "5528a60746f42d0dd8337ff244d1cc54f5536c2469f92e72b37a1cb5aae5544b946f63e535852b01f3b2e812c1a8c480692e341c82381f8987bc75c1d257922a18a3c013024ce9a0aaa9d7941c7e85b105cc8b55431500ca538c19d92207ef47a129cb1b7fda39beeed58bc4870e9a312a1c9a5631ba3fc0ae3edeeece3516e34780f152809d279341d64dba34ab47eda0df6d36057dd6ff86972fd05f1ae1f1cc85dfa032f6f2885301617b10f9bdbc3902c04944698450f35276a4e47338ea3376a2ce83ab9aff6a74f4dcd09b5b2925f3", [[], [], [], []]}, 0x54a) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x1, 0x229) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000180)={@rand_addr, @local, @loopback}, &(0x7f00000001c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0xfffffffffffffffb, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x10000, 0x0) get_thread_area(&(0x7f0000000400)={0xec93, 0xffffffffffffffff, 0x400, 0x5, 0x6, 0x3ff, 0x0, 0x7ff, 0x4, 0x8981}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/156) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x22}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0x2, 0xffffffffffff0000, 0x1}) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000000)="c04facd5a8a5f1e81ca4f8391d55115eefac9ad8651bd2a02fcd58e027a0274cf0dca60f1509eca76625d9e874cde26dfe64288fafaf76b44b5205d672f8e8dd8dbc06bf6e75b8f225a55ff97e6c1f32349c523a4fc079fe9512b091ec86f584db46ebc7ae", 0x65) [ 239.778948][ T9287] ntfs: (device loop3): parse_options(): NLS character set none not found. 16:55:37 executing program 4: pipe(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_newrule={0x5c, 0x20, 0x20, 0x70bd25, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x1, @rand_addr="a16bf5e8c5d055d29ced137f8db439f3"}, @FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001a40)={0x8, "cabc6d01caf317f44641a8c3dc682b3363ae161de29797c14b049cec0fc318d9fcde2771fd9ea3caa75ab1dc36923da9c1b119a4a8aaf361684c134dd1f944848c088eec6ebe7f209ca75dcdf302037587e9faa309073e1be95dac25e3601b577e09de6dfe3b417af6792538f6b6ded64f3a1869076baeb1596a6e763db622b454c72795dec63de62e050cbb66653e607f9a68014cc13634af7a4925f4db3b22338de1665b64a892d0ae5916d02ccee7bd5ea5600765d7c1479b4337f4768353528e589f416c991ad7c5ccf3c7aab0ba0cfd015c2aa8796634a92558cf5ed1bb4759b74ea10f560110cdafc30f74ff18c1ede26c5973d721ba138f008001c913d452ba02c79609749981588e51676460d4e0c64998c7faf5e93b556fb3c8bf0e4c75ab8bc675a85220629b454a894b4ee8e5b3fd810ce0a1eb4e1a17813115553d23ce31af8ec3340a8a1023e633a46274f79c14cc0c1985134ffa4c15af7252bb8f8c1b9b24c0a9ac2714eaa6c40dc5097190159a9ae58b600f9fa8b76b9182e2a6836aaf69e3eeec0794d62598fbc909a56662154d98f9809d5ea752342d375e9cf488a85376887c985cdac44862f62491857eea57b6bdb3948992dd4ab8c3630505a93e611b76d2a05efbbe485a46404ceeb46eb99bfa08271916eb74a277fc9419edd4c058eb40547aba3a738c72455cd5f36e6cb5e67e69eec776cfc51f28691125f6180ed5f799e500c7bce2a6084a0b6f6d6e3f2c96e0c138c93c0d938894978d019701823ba051a4a986191e4cb7406bf33b8b421643b8974e729a92fbb80d1e1e5ef24e99a53ce305c79dea8ae9b12e417a66b2f2e0c97c9960626e1ee1f86708e40060c7bb12d6b440e3d601d2ac6fb232e60cad491423aebe9d0aa330e28db43d658de512ebd63af4145234fb4b2c15a3ca4c3bff5566d0691d87d19892d521946e34a0dd6b51aa55aab4205940fd90e66e60e529bd403ae09fe0ff03ff83b92bd1ac36d9cc8049bc2007fe7b6f0d14ec1374e141169cb2e1fdae0d67e2cc7aac9fc9ff14e37f7b2ad52212649665af0bf4086589796f957695c00027c2315716fe8694d77fbff345b6827dcdc9188bceda56713bd0d9774a10353460e94ddc078816f163d388e27af61a9089f0c2367bfe352b60f921037a4160770405e17b4a3d9c10c507c70b4d8b5b7fde246692f580ad6129a6bde4cfda713c45ec78c54beeff334a6e1ae4fdc1374ee52b912f02daea9b1c2bc59f734e304bad5e72e45b85076f498e5fadfa0c85f0572e649a94df50dc00296d074f4a5275022dfabad8d7d5d74b233c9a74cc917e6eac5ee13a1a81839b2980011ca86643ad74dc2251901b88fa14640448a5a8529018991e9fb632bcd68184ebda3f02ad81e61f76f8dbff7c76183b34adaa075374caf71a13a51f675ebc35b4a96133bf06ed3eb8259371a1c2643eb7f86cba5285a5ac880ed3b21b1d6a5d09ab0819888377077aa645acf6cf378f22d1915082221458067701903e0b79bffc85f2f2afaa77c5838f663e89a51b339490ed87bd4df7734e3130bc05fe8c7e97d16db3c591031b7fa1cb784646296d7ac775e2bc47b559e7047885e0f5823857f19049cbe5732d293084168bedc1d54bb8929be78b1852ae6f9d9b4b27e0dcd1488c083dfd764dc38de279f619e32f34a53ad43b26316f74218ac9b5a0c8bc9dfce3eb7377d5b443e29ae13d9671ddc0e4f3aa38f01c270f085e3e649c1ec223a15349d9351ecdd7832c9c44a8acbb79002c74fef8aefbc2414417ffd1dce8a552357c9fe549ec8c884846fcd2b0668b5e5d828dff047d252786799b5e029e1e57d96cbe51095ed75aba0a8be89eb31a29b30695f7908bf48e1b26ee0c6cea701f7f9fb864ef8f04a54101a5218bf5e9d2a80456451026d07797ccc80314b1aa2a50edae7f7e4f8a4cb8c59485bd7fc34e53eb818ea98ee95af73db41720a0b78afda942a59491616f1b6ae8b47e65b24d0c21d3bca8aaa82865b076850fc4508d19099fec6d949cec0bad6052efec2a5ca40ce662640843433a43a29cd6c7fe0f177619279ff6ba6221be1424bbacba5e3331d09e0904b71ecd36fe695c10510f153e5797630082940fce87f3fcccbc2f2743a00899b861b6d4089c6d15b40bc352a2762bf368d499161b62230d765d72e3b4ea4c442a26a609cbe12653b18334c4a12f01db26cfb6430e73afc306e7c4002cfcd6eb27fd8e8c77e00d6d898e592c61887b160784cf8e979c0648a0971a26d313835b09a2a9c5a85f61573f9e4b06670a4383c94c64e9388e2c41cca916e5a372532c075d5dfed3e3ffe2c72bcc67db6ef89624352e06ee0ceba6427149db7fcc56fd9b086300597662737aeaa440bbcc4a812b390e66ef5591b8a3543d14d6579760bbc5cda811acedd086bd9710699dea7ee4aa0ebc818acb09508f73f1d3becf8187fb33e801b4975c139e4aa7ff1744cb32343c345824bf3ea7c9e3abfcca6fe91270202f5af668d0cd144938654017555c454330cb217f9d495945988ec9a89a678a5f63ccbc2bdfaa73415d562cbf01880dc18847625303149676defd924c28ea2f2df4a8ab9272e6a83a0eda611aa3c2ab292ad11f8dc8e68abbce2a5a3676d848c8e68d6979efeef2cd97c6b95c6fe891eaefc27b0fc8e39efccd93660ec1a9f0d3dd849791cb60238383a3f57cb2046118688abc81b3fdf0ded2fdd2ff848ab25055f4fa78d51662f0e894e4bce601404964a67b01575d4d93a89600dc7152a2d0db2ff36a4363cea52bc256d5e6eb077d933c966a6d94d4118291f84778673ea24b7099ab6bc1db8c1d34785360e3f7169dd1b532fc0e60ab6c7abbbfee735a9aecaadd33848f34e2ed4ae9370385fe7cce90ade554fa2ab8561ec7a51f98a08087d267f8479b5871bcb2b6689f55caac1d77f178d89909a7722df535c4b8a6daf886b0be635523abb53594f54dab7f3ffc7c9ba85e2f16cf7dafe2fbd305798032c73f3441d4aadd5d44554d9f4b725fe449b077f04d60d6818112fd87958e9bb6d1e8cec14b17629dfd944235905f34e251345a97b22423af807ae0a4af92ee8f4897290b41571d3f5b78e906085a40e7f2fb43196d3189c3fb1740c588ab06f2c307d341f5a853fab3da84a5bdb68c09695c3537ec7ab4499d1682dc44480651763c783198603cedf1898e6cae964490585b3feedd0ab60cea8b76ee6946f770133329ade7b3a16738c53cea2782c189423c96d7d9cc49b944e249f3c953a78d7a7e7e6c12923a22f4084589caa75c02129d7148d60f4a447b8138f09a88b2add20e4d8b77e4b0a68972c068f8f5da331c45ef652d38cea77fa57e07bdcbaf9af2e46b7573794e34bec638581948a94b5346dc7e9b1a426b26edefb42aaad52ca1759021648ebd2dad411386945716e21824ece257c2f5602f49bd2d65be54dc8de4a7413fed32fd119a1ea34fd9bdbfaed5600f95fc25479992efc14fd140ce516bea320c3ac84f7d57862857729bc86dd2cfb6dff176e661c29c2e96909411a0fa27955a70fd573f1ac8863e5cb1910df8ef7622773339bff00e181ffeec398bd1315650cef24af0a671782fb3aa9eeb158a86fa7a5c386814368e8df85df07dac7ffaa57ff70c0f1ac934fa46e6e323e5eb12412315cb1a3c81adc76cf3cd9bbd093223632c7ebdcee11be7b0268363040b5cec22502b62496034c293e185114fca7e9a0f261990b7a903063a993f47d83965a02ccf6dfc64e6d1f899d07cb34b8e77d70cd7f4228f8c457ed6c84d1d1a4d292b0b01eb22e306cc2d6f4f9d93d688410603772bf4259668aca4bad0773543d6570f6be2e00c6e231dd00b84fee31735ba735a699ce6313a34afb68a7fc85c3793e3bb4a617bdf1cb7f2296cb03c931bcd428f737aa3f72d8dca72e645fb92daba7e207dd21fbe77192cecf928360430cd3fb68fb2a9f7177260e6de34ceeb9e88d992ee61306bf92335a56ea5be56802f4d740f12edbaf3451901c74db2e36c745ac8952291f60d7d01985d209c1784737d100655a8a82f440cfc4b29daabe73dda70160a34bd4a62df213ab78db1f2108d8a89f09e3488b6841d23c2a826a34be4c86afcdaaa7257adc814bec6444bf8db4fc47641edb078559be21924946586215152755b7f26cd31849a5c6aa6c40edbb28b5de34bfec107a36be2833cb57ad5aaf7d0722d54345b3fadb5e3abb750a6432aa81865876cc71b5fcbda61b24ffcde81578c9b5be50adb57ff0feac0c55110698c75017474ced541909d1febddc3a2bfbd38d05debe2a700caec3cd2c8ed7c3118f0c30e51d7ec9acf89469a2df2875021a16a47e8b32e374a1f01f8d950280f46e859c26cbffe134175753672a533d6d2af1b5084da2aa2c274473edd71b107afea18356a2e93a5550f1239fba7b7d0f764c1c72e3046871d5a31fcb5302560bc7bacecfd0d7d0c4f4213ab6d6cc6f29d262dc18013759ad041a2cc2243f0d884c50fa5b93d91ebf9a9d9856f0da66900f7efb51c6b2237a02357b8c9b3a00f21577766d7f4b5e89e67c792e75e0714d4be170d92a38db4bbac02d7c4a0ef3bae7976338ecd9b8685ef494ce320133f8e8eea5d213c43ceab5a5238bf26f10110e3d11a32ad57f8714d3915ccc63d334c92412ee4c36b691719de26ee55ee97e453a17d01a6b31e360ec394e133cf5c3e8614e0de5c5cea7ee6be000d875c233752dc9ff69e3eaeffa75694db959b8a8a250510b5952caf4fd59042790119ae79c9dca91bf7c0709e544f01bcfdef84276e6232625628bbdc5a40df79b2366979ef7b3427140f7b5608f9b9d5471e87912875d022a37b23cba6c243f8e27cd9df571a73db82dac24cb4ae1626ebd912697bd38da7519ab188102e4c038014fc12a92734c219b74b114b0a949339caaa43dea1d945f82e6c754f5ad72071e7f7b30846cd92afc64f5ce2504dbb8d0aeb1658eccde056e2594cca3a412733e489817b3e62b3bd1f5df33fbfd95a1179675c90099f4bb647b463171247f17f519a1698910336872f4eec54ce58fb994cbf0a11a8d5d840546802e2c5133a245d7775a40d80a8fabc27c5df990efdec09b3b0d2aec1a9d1f63dbdea681ce6ecfe27ff8b9a79df8bd7bd4c6ec06e061bc1d7e64a26c88bc2f88b5ddb2617ee392f0774eb7cb3094ef1f74522f46dd20002580be43663e8564c5a9a5700d20afe56646febebe28f20b6bc9841dc34e82cb84e88faa89e4d06259c3694f28b88d8f389fd82b03dbc3af7f0c09a4a29f4bb510b60d471556408a0d5a64348bfc4b89a8726f0cb9fe6c3057eaf88fbc744e663851ee1cac6e107499791ffaf7391ab658fb126fea50b7142dc032550aa4fce9ce58170315bced6f4bf804af8888cfa219abed3f7e193019ee61b2baaf9a6f89426592da623a6c33cebfbee2b93f8ebd5fa38814436a374c7d9584b2fa9334e64eb055f022fbdebc8678217185935efed1a9682ece06e00ca688bf7ff34e3231f4bb941ba7e3c4af5efd62a94afc3f4b3a52a88c8286f3fe12e992070074abd956e8d88cc5a1065396fde032302f52e243aabe7832c0226044c01f1ecdc68a589e08a74fca178bbcf05912984553602da321865a3c3960e77c3f18596af89775c1bf760b41294e4f5d34a007ac4db2b25cbfadc08986a7484f7dea0fc1e07e33f2caf9cc0ed4261e6d12471ccf4aac0bf43dd3855a649bcc9964b4015d65e6bbecf0a85b3a5f7a522cbed3172542b63cbaf8e", 0x1000}, 0x1006) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 16:55:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'ip6gre0\x00'}}, 0x1e) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000000f6, 0x0) 16:55:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="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", 0x1015}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0xbec5aef5e9f97d21) sendto$rose(r1, &(0x7f0000000040)="a4abf2b338a1ce00c6ea15ac981c72cdc402a44fc9a838b2b822af2b1b9d1100295b587f5949335b44c4fbde2480838f31483ae22e3e5c8015ce2fbb45810c", 0x3f, 0x4040800, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x29, 0x5, 0x0) 16:55:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cgroup.max.depth\x00\xb4C\xaa N\x10\xaaP\xd2\x18\xa4n\x88\x1f\xb7\xc6\xd2\xc6\xa8\xbc9\x1b\xf4m\x8c\xfd\x1a\xbc1\t\x13\xe2d\"\xde\xf4/\xaa7\xbb7\xbc\xdcx\x1a\x00z\'\x88\"\x17\xbbc\xffORjzz\xbc\x0e\xb4\x85C\xb9\xde\xfae\x99u\x98b\xd2\xablb_6\xf9\x14D\xf9\xc5\xcb\x8d\x06\xedP\xf1\x06\xf9\xb5L\xee\xa2\xe4T\xec\xf0L\xaeS\x88\xbcI\xac\x1c\'d`\x8a\xfa^Y6\xec\x1c \x98\xcc\xf2]r\xa5\xc8\"z\xac\xd36\xc1\xdc\x04n\x1ez\x02\xe0\xfc,\xa7k\x1fq\xb0\xc0\x1b\x1e\x96\xa2w\xd0\xac5\x00\xe5\x16{', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) [ 240.026218][ T9309] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0xffd) [ 240.600843][ T9264] WARNING: CPU: 1 PID: 9264 at kernel/fork.c:677 __mmdrop+0x26a/0x320 [ 240.609620][ T9264] Kernel panic - not syncing: panic_on_warn set ... [ 240.616227][ T9264] CPU: 1 PID: 9264 Comm: syz-executor.0 Not tainted 5.2.0-rc6-next-20190628 #25 [ 240.625352][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.635455][ T9264] Call Trace: [ 240.638809][ T9264] dump_stack+0x172/0x1f0 [ 240.643269][ T9264] ? __mmdrop+0x190/0x320 [ 240.647623][ T9264] panic+0x2dc/0x755 [ 240.651575][ T9264] ? add_taint.cold+0x16/0x16 [ 240.656339][ T9264] ? kasan_check_write+0x14/0x20 [ 240.661332][ T9264] ? __warn.cold+0x5/0x4c [ 240.665694][ T9264] ? __warn+0xe7/0x1e0 [ 240.669825][ T9264] ? __mmdrop+0x26a/0x320 [ 240.674157][ T9264] __warn.cold+0x20/0x4c [ 240.678455][ T9264] ? trace_hardirqs_on+0x67/0x240 [ 240.683496][ T9264] ? __mmdrop+0x26a/0x320 [ 240.687844][ T9264] report_bug+0x263/0x2b0 [ 240.692259][ T9264] do_error_trap+0x11b/0x200 [ 240.696871][ T9264] do_invalid_op+0x37/0x50 [ 240.701301][ T9264] ? __mmdrop+0x26a/0x320 [ 240.705700][ T9264] invalid_op+0x14/0x20 [ 240.709899][ T9264] RIP: 0010:__mmdrop+0x26a/0x320 [ 240.714833][ T9264] Code: 5f 5d c3 e8 88 6c 2f 00 4c 89 ef e8 c0 c5 2b 00 eb d2 e8 79 6c 2f 00 0f 0b e8 72 6c 2f 00 0f 0b e9 fa fd ff ff e8 66 6c 2f 00 <0f> 0b e9 2b fe ff ff e8 5a 6c 2f 00 4c 89 e7 e8 62 c2 67 00 e9 85 [ 240.734523][ T9264] RSP: 0018:ffff888059227ac0 EFLAGS: 00010293 [ 240.740598][ T9264] RAX: ffff88805921a140 RBX: ffff88805921a140 RCX: ffffffff8142f58b [ 240.748604][ T9264] RDX: 0000000000000000 RSI: ffffffff8142f0da RDI: ffff88805921a570 [ 240.756719][ T9264] RBP: ffff888059227ae8 R08: ffff88805921a140 R09: ffffed100b217e94 [ 240.764758][ T9264] R10: ffffed100b217e93 R11: ffff8880590bf49f R12: ffff8880590bf440 [ 240.772873][ T9264] R13: ffff8880590bf568 R14: ffff8880590bf990 R15: 0000000000000000 [ 240.780905][ T9264] ? mmput+0x3db/0x4d0 [ 240.785035][ T9264] ? __mmdrop+0x26a/0x320 [ 240.789381][ T9264] mmput+0x3f0/0x4d0 [ 240.793278][ T9264] do_exit+0x84e/0x2ea0 [ 240.797465][ T9264] ? mm_update_next_owner+0x640/0x640 [ 240.802967][ T9264] ? lock_downgrade+0x920/0x920 [ 240.807866][ T9264] ? _raw_spin_unlock_irq+0x28/0x90 [ 240.813094][ T9264] ? get_signal+0x392/0x2500 [ 240.817680][ T9264] ? _raw_spin_unlock_irq+0x28/0x90 [ 240.823010][ T9264] do_group_exit+0x135/0x360 [ 240.827656][ T9264] get_signal+0x47c/0x2500 [ 240.832130][ T9264] ? do_vfs_ioctl+0x120/0x13e0 [ 240.836993][ T9264] do_signal+0x87/0x1700 [ 240.841312][ T9264] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 240.846821][ T9264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.853122][ T9264] ? setup_sigcontext+0x7d0/0x7d0 [ 240.858151][ T9264] ? kick_process+0xef/0x180 [ 240.862837][ T9264] ? exit_to_usermode_loop+0x43/0x2d0 [ 240.868193][ T9264] ? do_syscall_64+0x5a9/0x6a0 [ 240.872958][ T9264] ? exit_to_usermode_loop+0x43/0x2d0 [ 240.878316][ T9264] ? lockdep_hardirqs_on+0x418/0x5d0 [ 240.883604][ T9264] ? trace_hardirqs_on+0x67/0x240 [ 240.888621][ T9264] exit_to_usermode_loop+0x251/0x2d0 [ 240.893921][ T9264] do_syscall_64+0x5a9/0x6a0 [ 240.898541][ T9264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.904423][ T9264] RIP: 0033:0x459519 [ 240.908321][ T9264] Code: Bad RIP value. [ 240.912387][ T9264] RSP: 002b:00007f78ea334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.920802][ T9264] RAX: fffffffffffffff2 RBX: 0000000000000003 RCX: 0000000000459519 [ 240.928784][ T9264] RDX: 0000000000000000 RSI: 000000004008af03 RDI: 0000000000000005 [ 240.936790][ T9264] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 240.944762][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f78ea3356d4 [ 240.952729][ T9264] R13: 00000000004c4389 R14: 00000000004d8300 R15: 00000000ffffffff [ 240.962323][ T9264] Kernel Offset: disabled [ 240.966696][ T9264] Rebooting in 86400 seconds..