Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. 2020/12/16 03:59:00 fuzzer started 2020/12/16 03:59:00 dialing manager at 10.128.0.105:33803 2020/12/16 03:59:00 syscalls: 3308 2020/12/16 03:59:00 code coverage: enabled 2020/12/16 03:59:00 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/12/16 03:59:00 extra coverage: extra coverage is not supported by the kernel 2020/12/16 03:59:00 setuid sandbox: enabled 2020/12/16 03:59:00 namespace sandbox: enabled 2020/12/16 03:59:00 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/16 03:59:00 fault injection: enabled 2020/12/16 03:59:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/16 03:59:00 net packet injection: enabled 2020/12/16 03:59:00 net device setup: enabled 2020/12/16 03:59:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/16 03:59:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/16 03:59:00 USB emulation: /dev/raw-gadget does not exist 2020/12/16 03:59:00 hci packet injection: enabled 2020/12/16 03:59:00 wifi device emulation: kernel 4.17 required (have 4.14.212-syzkaller) 04:00:16 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 04:00:16 executing program 1: syz_emit_ethernet(0x23bf, &(0x7f00000001c0)={@local, @broadcast, @val, {@ipv6}}, 0x0) 04:00:16 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1025, 0x0, 0x0) 04:00:16 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000640)=""/254, 0xffffffffffffff0c}, {&(0x7f00000002c0)=""/78, 0x4e}], 0x3) 04:00:16 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x11, &(0x7f0000000000)={0x18, 0x2}, 0xc) 04:00:16 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x408, &(0x7f0000000080)=@abs, 0x8) syzkaller login: [ 107.307114] IPVS: ftp: loaded support on port[0] = 21 [ 107.472954] IPVS: ftp: loaded support on port[0] = 21 [ 107.593877] chnl_net:caif_netlink_parms(): no params data found [ 107.629419] IPVS: ftp: loaded support on port[0] = 21 [ 107.737547] chnl_net:caif_netlink_parms(): no params data found [ 107.767294] IPVS: ftp: loaded support on port[0] = 21 [ 107.877070] chnl_net:caif_netlink_parms(): no params data found [ 107.913583] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.920930] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.928977] device bridge_slave_0 entered promiscuous mode [ 107.936971] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.943341] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.952467] device bridge_slave_1 entered promiscuous mode [ 107.971104] IPVS: ftp: loaded support on port[0] = 21 [ 108.025537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.040369] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.050263] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.057979] device bridge_slave_0 entered promiscuous mode [ 108.064606] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.071912] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.079279] device bridge_slave_1 entered promiscuous mode [ 108.093417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.141929] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 108.149622] team0: Port device team_slave_0 added [ 108.166845] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.178188] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.187922] team0: Port device team_slave_1 added [ 108.217726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.301126] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.308753] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.316685] device bridge_slave_0 entered promiscuous mode [ 108.323130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 108.332008] team0: Port device team_slave_0 added [ 108.341270] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.349924] team0: Port device team_slave_1 added [ 108.356288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.362617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.388008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.402641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.409043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.434311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.444621] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.453510] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.461150] device bridge_slave_1 entered promiscuous mode [ 108.475264] chnl_net:caif_netlink_parms(): no params data found [ 108.495093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.499521] IPVS: ftp: loaded support on port[0] = 21 [ 108.503715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.546159] device hsr_slave_0 entered promiscuous mode [ 108.552712] device hsr_slave_1 entered promiscuous mode [ 108.568222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.574483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.600583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.616607] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.635645] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 108.643074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.650702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.676870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.688567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.699970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.719480] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 108.726705] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.779239] device hsr_slave_0 entered promiscuous mode [ 108.786193] device hsr_slave_1 entered promiscuous mode [ 108.808307] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 108.860798] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 108.869048] team0: Port device team_slave_0 added [ 108.874308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 108.913091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.921467] team0: Port device team_slave_1 added [ 108.949725] chnl_net:caif_netlink_parms(): no params data found [ 109.007764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.014663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.040078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.079215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.086070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.112298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.152877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 109.161799] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.169211] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.178602] device bridge_slave_0 entered promiscuous mode [ 109.195318] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.201910] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.210720] device bridge_slave_1 entered promiscuous mode [ 109.236711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 109.268810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.309850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.326983] Bluetooth: hci0 command 0x0409 tx timeout [ 109.339316] device hsr_slave_0 entered promiscuous mode [ 109.348232] device hsr_slave_1 entered promiscuous mode [ 109.401218] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 109.409534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 109.484555] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.492098] team0: Port device team_slave_0 added [ 109.496073] Bluetooth: hci4 command 0x0409 tx timeout [ 109.499429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.505994] Bluetooth: hci1 command 0x0409 tx timeout [ 109.510625] team0: Port device team_slave_1 added [ 109.514869] Bluetooth: hci5 command 0x0409 tx timeout [ 109.536036] Bluetooth: hci2 command 0x0409 tx timeout [ 109.542172] Bluetooth: hci3 command 0x0409 tx timeout [ 109.580341] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.587468] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.594690] device bridge_slave_0 entered promiscuous mode [ 109.604168] chnl_net:caif_netlink_parms(): no params data found [ 109.621770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.628234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.653514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.668970] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.675336] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.685424] device bridge_slave_1 entered promiscuous mode [ 109.706510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.720009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.726410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.752944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.786900] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.801152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 109.810257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.829330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 109.874001] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.888259] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.895482] team0: Port device team_slave_0 added [ 109.902621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.910063] team0: Port device team_slave_1 added [ 109.928870] device hsr_slave_0 entered promiscuous mode [ 109.934613] device hsr_slave_1 entered promiscuous mode [ 109.955528] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 109.983271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.991741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.017811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.028728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 110.036282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.042528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.067958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.089488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.117298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.183554] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.191138] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.198857] device bridge_slave_0 entered promiscuous mode [ 110.219234] device hsr_slave_0 entered promiscuous mode [ 110.224899] device hsr_slave_1 entered promiscuous mode [ 110.246469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.260225] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.267147] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.274097] device bridge_slave_1 entered promiscuous mode [ 110.283876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.293324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 110.301522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 110.313386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.358093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.388885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.397254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.410633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.420595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 110.455010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.467930] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 110.473997] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.518428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.529448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.538261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.554169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.562274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.572520] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.579129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.595133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.602879] team0: Port device team_slave_0 added [ 110.610529] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.621714] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.634396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.642089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.649339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.657471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.664795] team0: Port device team_slave_1 added [ 110.681304] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 110.688345] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.701289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 110.710013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.719518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.739815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.747497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.755497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.764113] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.770533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.778848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.786090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.792956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.800947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.808945] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.815700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.840720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.847196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.873343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.885118] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 110.891825] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.902025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.915264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 110.927317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.933585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.959169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.970921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 110.981152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.993384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.001195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.009770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.017715] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.024444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.032151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.040171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.047932] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.054280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.064205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 111.075025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.086424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.097721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 111.112242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.124862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.133162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.141208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.149516] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.155982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.162970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.172106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.180606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 111.193843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 111.203934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 111.218988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 111.226356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.234319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.242204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.250022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.258049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.265742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.273467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.280675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.303789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 111.314938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.327866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 111.339315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 111.347473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.355139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.368732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.377829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.385999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.399357] device hsr_slave_0 entered promiscuous mode [ 111.405842] Bluetooth: hci0 command 0x041b tx timeout [ 111.411547] device hsr_slave_1 entered promiscuous mode [ 111.418483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 111.441204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 111.451635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 111.460679] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 111.469230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 111.478879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.489523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.497367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.505039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.512882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.520469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.529493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 111.546391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 111.575961] Bluetooth: hci3 command 0x041b tx timeout [ 111.581266] Bluetooth: hci2 command 0x041b tx timeout [ 111.588481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 111.590346] Bluetooth: hci5 command 0x041b tx timeout [ 111.597740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.609103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.616824] Bluetooth: hci1 command 0x041b tx timeout [ 111.617481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.622154] Bluetooth: hci4 command 0x041b tx timeout [ 111.630736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.644018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.652343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.660720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.670767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 111.680350] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 111.686693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.711709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.722240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.732903] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 111.740263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.750909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 111.777790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.793580] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 111.801831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.810605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.820730] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 111.827779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.842751] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 111.851953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 111.859960] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 111.889392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.899497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.913291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.924822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.933050] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 111.941827] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 111.950366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 111.958683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.965440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.973535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.981031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.999250] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 112.005333] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.013677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 112.021911] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 112.033237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.042498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.051896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.070921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.081751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.088924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.097073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.104991] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.111408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.119281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.129994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 112.148016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.155054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.167122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 112.185119] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 112.194060] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.207138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.214837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.227542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.235083] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.241493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.253126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 112.262847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 112.273107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.284647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.293236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.301916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.309989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.318060] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.324455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.333985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.344574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 112.357260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.364447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.375418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.383603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.392449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.400433] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.406973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.413856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.424454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.443850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 112.452871] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 112.485077] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 112.492984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.509860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.517662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.526481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.534339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.544534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 112.565158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.576264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.586638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.607385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 112.615023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.628415] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 112.634471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.644057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 112.654596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 112.664300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.672825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.681343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.697816] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 112.709185] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 112.717004] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 112.723620] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 112.736008] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 112.745226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.758439] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 112.771154] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 112.781642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.791301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.799313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.807846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.815422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.823365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.831501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.838934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.847199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.854932] device veth0_vlan entered promiscuous mode [ 112.863972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 112.872490] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 112.887861] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 112.903706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.913413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.920787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.929138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.936313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.943001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.951141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.962100] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 112.968557] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.978340] device veth1_vlan entered promiscuous mode [ 112.988304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 112.996478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.004058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.017556] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 113.025330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.038558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.053399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.062901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 113.082973] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 113.092355] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 113.100433] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 113.108638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 113.117392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.126509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.133992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.142566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.150740] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.157163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.164631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.180101] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 113.191573] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 113.205125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.214465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.225773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.233180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.241439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.249739] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.256258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.263536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.270982] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.281057] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 113.288625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.296980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.309207] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 113.315262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.330899] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 113.338647] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 113.345469] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 113.357595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 113.369792] device veth0_vlan entered promiscuous mode [ 113.378855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.401085] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 113.409897] device veth0_macvtap entered promiscuous mode [ 113.420263] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 113.430309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 113.439849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.448786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.456877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.464243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.474122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.481758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.489668] Bluetooth: hci0 command 0x040f tx timeout [ 113.491842] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 113.504673] device veth1_macvtap entered promiscuous mode [ 113.512003] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 113.520943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.529618] device veth0_vlan entered promiscuous mode [ 113.539453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.546958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.554667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.565333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 113.576226] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 113.587150] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 113.599281] device veth1_vlan entered promiscuous mode [ 113.605489] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 113.618188] device veth1_vlan entered promiscuous mode [ 113.624868] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 113.632769] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 113.641314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.648760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.657123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.664035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.672589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.680574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.687578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.694319] Bluetooth: hci4 command 0x040f tx timeout [ 113.696373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 113.706767] Bluetooth: hci1 command 0x040f tx timeout [ 113.712035] Bluetooth: hci5 command 0x040f tx timeout [ 113.714795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 113.717431] Bluetooth: hci2 command 0x040f tx timeout [ 113.717496] Bluetooth: hci3 command 0x040f tx timeout [ 113.770468] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 113.778739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.794764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.802913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.816322] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 113.823450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.837614] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 113.846155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.855402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 113.864800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.877890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.886576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.894340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.902006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.912490] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 113.920321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.938257] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 113.945327] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 113.953337] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 113.961065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.970354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.983586] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 113.993067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 114.005457] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 114.014109] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 114.028165] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 114.040534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.050672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.063155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.071378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.079617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.087473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.096597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.103630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.116420] device veth0_vlan entered promiscuous mode [ 114.126167] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 114.137439] device veth0_macvtap entered promiscuous mode [ 114.143530] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 114.152597] device veth0_macvtap entered promiscuous mode [ 114.160911] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 114.174989] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 114.182220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.192649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.200319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.208772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.216814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.226649] device veth1_macvtap entered promiscuous mode [ 114.232984] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 114.244971] device veth1_macvtap entered promiscuous mode [ 114.252567] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 114.265461] device veth1_vlan entered promiscuous mode [ 114.273834] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 114.293806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 114.309862] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 114.322177] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 114.332063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 114.342681] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 114.359003] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 114.372162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 114.382920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 114.399118] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 114.407194] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 114.413966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.422839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.430559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.439268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.448992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.457416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.465198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.472311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.487377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.503071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.514338] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 114.521412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.531144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.540968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.551265] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 114.558489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.572912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.581258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.592979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.601560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.611238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.621268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.630802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 114.640828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.651089] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 114.658748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.668586] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 114.675890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.686220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.695714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 114.705418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.716157] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 114.723041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.740439] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 114.747775] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 114.754464] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 114.761980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.770318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.779099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.787764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.795378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.803559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.814464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.832432] device veth0_macvtap entered promiscuous mode [ 114.839527] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 114.861095] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 114.872232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.883494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.898117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.906391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.913411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.923573] device veth1_macvtap entered promiscuous mode [ 114.942229] device veth0_vlan entered promiscuous mode [ 114.968446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 114.993671] device veth1_vlan entered promiscuous mode 04:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200000001, 0x882940) [ 115.028080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 115.051168] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready 04:00:25 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) [ 115.074702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.100285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.114114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 04:00:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) [ 115.129988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.139755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.150797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.162558] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 115.172182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.184320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.196045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.205160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 04:00:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) [ 115.241959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.253462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.266860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.280282] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 115.288870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.300778] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 115.310727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.319820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 04:00:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4080, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) [ 115.336187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.361105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.376645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.384453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.404566] device veth0_macvtap entered promiscuous mode [ 115.417289] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 04:00:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x41) [ 115.450395] device veth1_macvtap entered promiscuous mode [ 115.468468] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 115.509883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 115.542556] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 115.562032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 115.570412] Bluetooth: hci0 command 0x0419 tx timeout [ 115.582900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.594160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.608281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.618239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.627952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.637989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.648284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.658093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.668529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 115.675454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.685128] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 115.697110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.704419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.721219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.738704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.747710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.756289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.764228] Bluetooth: hci2 command 0x0419 tx timeout [ 115.765815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.769864] Bluetooth: hci5 command 0x0419 tx timeout [ 115.784894] Bluetooth: hci1 command 0x0419 tx timeout [ 115.785054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.791727] Bluetooth: hci4 command 0x0419 tx timeout [ 115.804704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.814725] Bluetooth: hci3 command 0x0419 tx timeout [ 115.821078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.830552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.840460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.849709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.859497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.869767] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 115.877100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.899379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.912515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.008194] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 116.023851] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 116.043652] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 116.061835] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 116.081047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.089662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 04:00:27 executing program 1: clock_gettime(0x0, &(0x7f0000001300)) 04:00:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000080)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) [ 116.108716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.120657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.134213] device veth0_vlan entered promiscuous mode [ 116.162103] device veth1_vlan entered promiscuous mode [ 116.174015] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 116.188260] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 116.204256] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 116.219197] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 116.235388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.246782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.261874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.270496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.281953] device veth0_macvtap entered promiscuous mode [ 116.292991] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 116.311177] device veth1_macvtap entered promiscuous mode 04:00:27 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001600)='/dev/dsp1\x00', 0x4001, 0x0) [ 116.322556] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 116.334543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 116.346051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 116.359425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.374347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.385009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.395885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.405008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.416018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.425138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.436458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.448021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.458982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.469507] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 116.478870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.489093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.497952] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.505068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.514187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.524290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.535475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.546256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.556207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.565747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.576592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.585823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.596430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.606650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.616417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.627078] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 116.634015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.646119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.655015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:00:27 executing program 2: add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='K', 0x1, 0xffffffffffffffff) 04:00:27 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 04:00:27 executing program 0: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 04:00:27 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) 04:00:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, 0x0, 0x0) 04:00:27 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x2710}) 04:00:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 04:00:27 executing program 5: mremap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x3000, 0x7, &(0x7f0000ff9000/0x3000)=nil) 04:00:27 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4000, 0x0) 04:00:27 executing program 1: socket(0x2, 0x0, 0xffff) 04:00:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:00:27 executing program 3: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 04:00:27 executing program 5: timer_create(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001400)) 04:00:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x0, &(0x7f00000001c0)="e9"}) 04:00:27 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vfio/vfio\x00', 0x10800, 0x0) socket(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000003640)='ns/net\x00') 04:00:27 executing program 4: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 04:00:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000100000000000000001000100000000000000ecd8002000060000000000e8ffffffffff3f1000000035b17b4a2b1344ea51f2cdb59a3dde466514bda4b297086b415f9be569ef5d0dfae1cb000ad36666e477150ea59f7eb42534cc4791e0bf0a13fdd6d5859d508780f965f6f00534b89066492d58779f6c4e230c0fe852dbfbe5caf21a13d8981eaf52425d56fd04e243cb4477022eb586dd87434625", @ANYRES32=0x0, @ANYRES64=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xb000) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioperm(0x1, 0x72767918, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32=r0], 0xda00) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000024001d0f000000000100000000000000", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff000000000b00010064736d61726b00000c0002000600010004000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0xd, 0xffff}, {0xffff}}}, 0x24}}, 0x0) [ 116.991787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}}, &(0x7f00000000c0)=""/202, 0x26, 0xca, 0x1}, 0x20) 04:00:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x2, 0x2) close(r0) 04:00:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5fee000000000000000001"], 0x30}}, 0x0) [ 117.072141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:28 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a40)='/dev/dlm_plock\x00', 0x210000, 0x0) [ 117.118425] hrtimer: interrupt took 36559 ns 04:00:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 117.145081] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 04:00:28 executing program 0: add_key(&(0x7f0000001180)='cifs.spnego\x00', &(0x7f00000011c0)={'syz', 0x1}, &(0x7f0000001200)='z', 0x1, 0xfffffffffffffffb) 04:00:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000240)={"046c8ee790109cbc3b54b421bcf89469f773b291c2510bc838a96932003a"}) [ 117.192746] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.193892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:28 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 04:00:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005600)={'team0\x00'}) 04:00:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000100000000000000001000100000000000000ecd8002000060000000000e8ffffffffff3f1000000035b17b4a2b1344ea51f2cdb59a3dde466514bda4b297086b415f9be569ef5d0dfae1cb000ad36666e477150ea59f7eb42534cc4791e0bf0a13fdd6d5859d508780f965f6f00534b89066492d58779f6c4e230c0fe852dbfbe5caf21a13d8981eaf52425d56fd04e243cb4477022eb586dd87434625", @ANYRES32=0x0, @ANYRES64=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xb000) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioperm(0x1, 0x72767918, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32=r0], 0xda00) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000024001d0f000000000100000000000000", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff000000000b00010064736d61726b00000c0002000600010004000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0xd, 0xffff}, {0xffff}}}, 0x24}}, 0x0) 04:00:28 executing program 3: request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='-\x00', 0xfffffffffffffff9) 04:00:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='-\x00', 0xfffffffffffffff9) syz_genetlink_get_family_id$smc(&(0x7f00000005c0)='SMC_PNETID\x00') 04:00:28 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vfio/vfio\x00', 0x0, 0x0) 04:00:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 117.387140] audit: type=1804 audit(1608091228.257:2): pid=9619 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir718611937/syzkaller.l9GNVN/5/bus" dev="sda1" ino=15779 res=1 04:00:28 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x48, 0xfffffffffffffff8) 04:00:28 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000001980)='/dev/sequencer\x00', 0x0, 0x0) 04:00:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 117.493651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:28 executing program 5: timer_create(0x3, &(0x7f0000000740)={0x0, 0x31, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000780)) 04:00:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000100000000000000001000100000000000000ecd8002000060000000000e8ffffffffff3f1000000035b17b4a2b1344ea51f2cdb59a3dde466514bda4b297086b415f9be569ef5d0dfae1cb000ad36666e477150ea59f7eb42534cc4791e0bf0a13fdd6d5859d508780f965f6f00534b89066492d58779f6c4e230c0fe852dbfbe5caf21a13d8981eaf52425d56fd04e243cb4477022eb586dd87434625", @ANYRES32=0x0, @ANYRES64=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xb000) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioperm(0x1, 0x72767918, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32=r0], 0xda00) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000024001d0f000000000100000000000000", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff000000000b00010064736d61726b00000c0002000600010004000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0xd, 0xffff}, {0xffff}}}, 0x24}}, 0x0) 04:00:28 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) [ 117.616414] WARNING: can't dereference registers at 0000000000000c5c for ip retint_user+0x8/0x18 [ 117.808087] audit: type=1804 audit(1608091228.687:3): pid=9619 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir718611937/syzkaller.l9GNVN/5/bus" dev="sda1" ino=15779 res=1 04:00:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x5}}]}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:00:28 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f00000005c0)='SMC_PNETID\x00') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 04:00:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x80, 0x0, &(0x7f0000000100)=[@clear_death, @request_death, @acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x9, 0x0, &(0x7f00000001c0)="e9a8276d80386585b0"}) 04:00:28 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) 04:00:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000100000000000000001000100000000000000ecd8002000060000000000e8ffffffffff3f1000000035b17b4a2b1344ea51f2cdb59a3dde466514bda4b297086b415f9be569ef5d0dfae1cb000ad36666e477150ea59f7eb42534cc4791e0bf0a13fdd6d5859d508780f965f6f00534b89066492d58779f6c4e230c0fe852dbfbe5caf21a13d8981eaf52425d56fd04e243cb4477022eb586dd87434625", @ANYRES32=0x0, @ANYRES64=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xb000) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioperm(0x1, 0x72767918, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32=r0], 0xda00) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000024001d0f000000000100000000000000", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff000000000b00010064736d61726b00000c0002000600010004000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0xd, 0xffff}, {0xffff}}}, 0x24}}, 0x0) 04:00:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) [ 117.920467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:28 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) 04:00:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000200)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) [ 118.032356] audit: type=1804 audit(1608091228.907:4): pid=9675 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir718611937/syzkaller.l9GNVN/6/bus" dev="sda1" ino=15758 res=1 04:00:29 executing program 2: socket(0x2d, 0x0, 0x0) 04:00:29 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) 04:00:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) [ 118.171604] audit: type=1804 audit(1608091228.997:5): pid=9686 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir207610605/syzkaller.5N27wI/12/bus" dev="sda1" ino=15766 res=1 04:00:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:00:29 executing program 2: timer_create(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) 04:00:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) 04:00:29 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) 04:00:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='v7\x00', 0x0, 0x0) [ 118.512691] audit: type=1804 audit(1608091229.387:6): pid=9706 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir207610605/syzkaller.5N27wI/13/bus" dev="sda1" ino=15770 res=1 04:00:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) 04:00:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:00:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000002640), 0x4) 04:00:29 executing program 4: syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') [ 118.630436] audit: type=1804 audit(1608091229.487:7): pid=9718 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir718611937/syzkaller.l9GNVN/7/bus" dev="sda1" ino=15782 res=1 [ 118.654975] print_req_error: I/O error, dev loop2, sector 1 [ 118.661269] VFS: unable to read V7 FS superblock on device loop2. 04:00:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 118.719443] VFS: could not find a valid V7 on loop2. 04:00:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb) 04:00:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:00:29 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x2800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000001c0)}, 0x20) 04:00:29 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppoe, 0x80, 0x0}, 0x0) 04:00:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x5, &(0x7f00000002c0)=[0x8002, 0x0, 0x0, 0x38, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3) 04:00:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 04:00:29 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000003640)='ns/net\x00') [ 118.973500] audit: type=1804 audit(1608091229.847:8): pid=9753 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir718611937/syzkaller.l9GNVN/8/bus" dev="sda1" ino=15761 res=1 04:00:29 executing program 2: socketpair(0x11, 0x0, 0x0, &(0x7f0000001300)) [ 119.049030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.077747] audit: type=1804 audit(1608091229.957:9): pid=9766 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir207610605/syzkaller.5N27wI/14/bus" dev="sda1" ino=15770 res=1 04:00:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:00:30 executing program 3: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 04:00:30 executing program 2: waitid(0x2, 0x0, &(0x7f0000000140), 0x2, &(0x7f0000000080)) 04:00:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000100)=[@clear_death, @request_death, @clear_death, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x9, 0x0, &(0x7f00000001c0)="e9a8276d80386585b0"}) 04:00:30 executing program 2: add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 04:00:30 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 04:00:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000380)=""/60, &(0x7f00000003c0)=0x3c) 04:00:30 executing program 4: clock_gettime(0x3, &(0x7f0000001300)) 04:00:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 04:00:30 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x48) 04:00:30 executing program 0: waitid(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)) 04:00:30 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) 04:00:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_opts(r0, 0x0, 0x12, 0x0, &(0x7f00000002c0)=0x11) 04:00:30 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x18, 0x2800, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000200)=@udp6}, 0x20) 04:00:30 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') 04:00:30 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000780)) timer_gettime(0x0, &(0x7f00000007c0)) 04:00:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:00:30 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a40)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 04:00:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:30 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) 04:00:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, 0x0, 0x0) 04:00:30 executing program 1: timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x3938700}}, 0x0) 04:00:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 119.857937] input: syz1 as /devices/virtual/input/input5 04:00:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x750, 0x890, 0x230, 0x750, 0x230, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@remote, @remote, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2}}}, {{@ipv6={@remote, @loopback, [], [], 'geneve0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 04:00:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x6}, 0x4) 04:00:30 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000001600)='/dev/dsp1\x00', 0x4001, 0x0) 04:00:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x8000000, 0x538, 0x750, 0x890, 0x230, 0x750, 0x230, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@ipv6={@remote, @remote, [], [], 'team_slave_0\x00', 'veth1\x00', {0xff}, {}, 0x29}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2}}}, {{@ipv6={@remote, @loopback, [], [], 'geneve0\x00', 'hsr0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) [ 119.949862] binder: 9847:9851 unknown command 0 [ 119.957965] input: syz1 as /devices/virtual/input/input6 [ 119.974089] binder: 9847:9851 ioctl c0306201 20000200 returned -22 04:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffeff, 0x0) 04:00:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:00:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 120.111916] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 120.129327] input: syz1 as /devices/virtual/input/input7 04:00:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) [ 120.174891] input: syz1 as /devices/virtual/input/input8 04:00:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:00:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:31 executing program 3: add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 04:00:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:00:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) [ 120.752956] input: syz1 as /devices/virtual/input/input9 [ 120.772107] input: syz1 as /devices/virtual/input/input10 04:00:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 120.928479] input: syz1 as /devices/virtual/input/input11 04:00:32 executing program 1: add_key$keyring(&(0x7f0000002040)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 04:00:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:00:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) [ 121.623328] input: syz1 as /devices/virtual/input/input12 04:00:32 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a40)='/dev/dlm_plock\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 04:00:32 executing program 2: socketpair(0x11, 0x2, 0x0, &(0x7f0000001300)) 04:00:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]}) 04:00:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f00000001c0)='./file0\x00', 0x80000000001f5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x1e6}], 0x0, &(0x7f0000010200)=ANY=[]) statfs(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380)=""/170) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 04:00:32 executing program 2: socketpair(0x11, 0x2, 0x6, &(0x7f0000001300)) 04:00:32 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x42001) 04:00:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x0, 0x0, 0x829042, &(0x7f0000000900)=ANY=[@ANYBLOB]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001e40)={'team0\x00'}) 04:00:32 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x281, 0x0) read$FUSE(r0, 0x0, 0x0) 04:00:33 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 04:00:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x7, 0x0, &(0x7f0000000100)=0x300) 04:00:33 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x500, 0x0) 04:00:33 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/user\x00') 04:00:33 executing program 3: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x3}, &(0x7f0000000100)={0x77359400}, 0x0) 04:00:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 04:00:33 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a40)='/dev/dlm_plock\x00', 0x1d9841, 0x0) 04:00:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={0x0, &(0x7f0000001140)=""/192, 0x0, 0xc0}, 0x20) 04:00:33 executing program 0: request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)='/dev/er#\x00\x00\xb2\xde\x1c?\xe1\xc9(\x94\xd5\xa7~\xff\xc5z\xed\xf7\xad\xcb\xe2\xc6\tX\xbd\xd0\x01\xba\x00\x00\x00\xe7\xe7\x17\x03\x8a\x9c\xe6\xba\xbf\x95\xb5\xe5\xfa2i\xeb\x91\xc30\xcb\ri\x16\xbfK!\x96*\xfa\x98\x9bN\xb2s\x1bsJ\x06\x93\xbeA\xcc\xd7\x9cBS\xbf\xe6\xd2\x91\x90k\x94C\xe4dT\"\\\xdc5\tH\x0f\x7f\x8c\xa7x\xef[\x98\x1d\xce\xbe\xd5\x8a\n\x87\nX\x140\xc2\xc0\x13\x95$X\xf6-TY\'\x1e\xd5\xef\xcfdZ\xc2$\xe5Sas\xa8\x98\xa5\x12Y\xe6\x8c\xd8\x1e%\xfd\x107\x852\xf2\x98\x9fJ\xa8\xd3M\xf1\xfe\xd6\xea(\x1e\x99\x8d\xfd=uN\x913\x8f\xdc\x85B\x8f\x04\x8d\x1f\xfbt\xdf\x1dJ\xee6\x13\x95\xab3\xa6\x02\xc0\xa6\xc2\x94\x9c\xbbR\xd1\xc0\xcc\x98\xfbme\xdcu\x9b};f}\x9cF\xb6\x13\xf7\xb6\x95xe\xa6\xc4-\x9f\x88\xddf\x9eFg-\xf2K\xef\x8f\x10\xfc\x8e\xb91n\xa0$_|\xd7a\x1e)9\x99\xc0c\x94\xddm\xc8#\x82\x04r\xf7\xddg\x1b\t\xf7\xe0v\\\xfd\f\xe4\xdd,]\xc3\x06\xfd6K\xd8ua\x94\xf3\x80\x8f\xde\xffN\xe7\xca^\x05\xfe\xb1\x05p\xe8$|k\xdaU\xe6\xab\xe2Q\xd1\xe2\xee\xebo\xc0\xa7D\x16\xa8\xec', 0x0) 04:00:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:33 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 04:00:33 executing program 1: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x4000)=nil) 04:00:33 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='&!]\x00') 04:00:33 executing program 3: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 04:00:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a40)='/dev/dlm_plock\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 04:00:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x150, 0x150, 0xa, 0x0, 0x390, 0x238, 0x238, 0x390, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@ipv4=@empty, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv4=@loopback}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@dev}]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'team0\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 04:00:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82082, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 04:00:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82082, 0x0) 04:00:33 executing program 2: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) [ 122.428998] audit: type=1804 audit(1608091233.307:10): pid=10063 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir409884404/syzkaller.bwP5RR/25/bus" dev="sda1" ino=15848 res=1 04:00:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x9}]}}, &(0x7f00000000c0)=""/202, 0x26, 0xca, 0x1}, 0x20) [ 122.481239] xt_policy: neither incoming nor outgoing policy selected 04:00:33 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vfio/vfio\x00', 0x10800, 0x0) [ 122.671002] audit: type=1804 audit(1608091233.547:11): pid=10063 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir409884404/syzkaller.bwP5RR/25/bus" dev="sda1" ino=15848 res=1 04:00:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) 04:00:33 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x48}, 0x0) 04:00:33 executing program 3: clock_gettime(0x6, &(0x7f0000001300)) 04:00:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:00:33 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='logon\x00', 0x0) 04:00:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:33 executing program 5: r0 = request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='%%\xc0\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', r0) [ 122.791773] binder: 10093:10100 ioctl c0306201 20000200 returned -14 04:00:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x2, 0x2) close(r0) 04:00:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="e9"}) [ 122.871586] audit: type=1804 audit(1608091233.747:12): pid=10103 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir409884404/syzkaller.bwP5RR/26/bus" dev="sda1" ino=15848 res=1 04:00:33 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) [ 122.990721] audit: type=1804 audit(1608091233.827:13): pid=10116 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir540278208/syzkaller.EJZzkO/35/bus" dev="sda1" ino=15809 res=1 [ 123.069679] audit: type=1804 audit(1608091233.847:14): pid=10113 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir713988678/syzkaller.dDMARJ/28/bus" dev="sda1" ino=15850 res=1 04:00:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 04:00:34 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x64001, 0x0) 04:00:34 executing program 2: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 04:00:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:34 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000780)) timer_gettime(0x0, 0x0) 04:00:34 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x735e93f1]}, 0x8}) 04:00:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:00:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:34 executing program 5: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14}, 0x14}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001600)='/dev/dsp1\x00', 0x4001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001980)='/dev/sequencer\x00', 0x404000, 0x0) [ 123.414965] audit: type=1804 audit(1608091234.287:15): pid=10150 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir540278208/syzkaller.EJZzkO/36/bus" dev="sda1" ino=15859 res=1 [ 123.503483] audit: type=1804 audit(1608091234.317:16): pid=10147 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir713988678/syzkaller.dDMARJ/29/bus" dev="sda1" ino=15807 res=1 04:00:34 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000700)="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", 0x171) [ 123.658315] audit: type=1804 audit(1608091234.377:17): pid=10155 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir409884404/syzkaller.bwP5RR/27/bus" dev="sda1" ino=15808 res=1 04:00:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:34 executing program 5: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 04:00:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) 04:00:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393036373937313100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005d00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f00000000c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1fd7, 0x2000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af30100040000000000000000000000010000001000", 0x3e, 0x4400}, {&(0x7f0000012700)}, {&(0x7f0000012800)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af3010004000000000000000000000002000000300000", 0x3f, 0x4800}, {0x0, 0x0, 0x4880}, {&(0x7f0000012a00)="8081000000180000e1f4655fe1f4655fe1f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4c00}, {&(0x7f0000012b00)="20000000000000000000000000000000e1f4655f00"/32, 0x20, 0x4c80}, {&(0x7f0000012c00)="c041000000300000e1f4655fe1f4655fe1f4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40}, {&(0x7f0000012d00)="20000000000000000000000000000000000000000000000002ea00"/54, 0x36, 0x6880}, {&(0x7f0000012e00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004510229000000000000000000000000000000000000000000000000020000000e42a2b4ce42a2b4ce42a2b4ce2f4655fe42a2b4c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x6c00}, {0x0, 0x0, 0x7000}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {0x0, 0x0, 0x20000}, {0x0, 0x0, 0x21000}, {&(0x7f0000013900)="111fc0d90100", 0x6, 0x30000}, {0x0, 0x0, 0x30c00}, {&(0x7f0000013f00)="2719c0d901", 0x5, 0x40000}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11]) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x190) 04:00:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x24004881) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x81, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0, 0xfe01, 0x5, 0x9, 0x8000, 0x4]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendfile(r0, r4, 0x0, 0x3) [ 123.781688] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 04:00:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 04:00:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) [ 123.870915] audit: type=1804 audit(1608091234.747:18): pid=10184 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir409884404/syzkaller.bwP5RR/28/bus" dev="sda1" ino=15864 res=1 [ 123.959779] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 04:00:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) [ 124.026683] audit: type=1804 audit(1608091234.797:19): pid=10195 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir540278208/syzkaller.EJZzkO/37/bus" dev="sda1" ino=15803 res=1 04:00:34 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm_plock\x00', 0x0, 0x0) 04:00:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:00:35 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 124.343761] binder: 10219:10220 unknown command 0 [ 124.352106] binder: 10219:10220 ioctl c0306201 20000200 returned -22 04:00:35 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000780)) timer_gettime(0x0, &(0x7f00000007c0)) 04:00:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:35 executing program 3: socket(0x26, 0x5, 0x9) 04:00:35 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 04:00:35 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x181) 04:00:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:00:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x0) 04:00:35 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdd2f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e17ae6525ae25fd8d9a014263697ca83c57fc2ead0d85a2bcc922a3aa71489fa0000c1a6ec9aa2e28000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596d80729476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a4fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb799d1084e7113c77ae25a0121de52e5e8cceddf2cb4b9895c0738fda3ea38c09e75b1f39ae8af2c746fbb43e3530767d8ee296487c0e650ead9003d032008fee2e02ece680c0d3d19b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f148ed2392ef113cbe241a98b4e8f3bf878f1dc0e115dd1c328f54369bc8dfd3a4ea21259ed518ae80606ef83d69b9d0d972b2231d05b2e31d61bf49ca69bdb0f57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fba93555853df9dbd3da536d88168217230eabfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be00500000095e31139b76417432c305d59cb68bff089979504c71418bd62ec60cfae7d75ce2adc8d4b2eabae5937b47e07da3f62be170ac03c7ae91659fc79fc36c84dd1b2b8972c5c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c843624027f7d55431a5756e4be9698bcd550c272c391cf24ea56d016e1f21b5999e1448f8784db6a9d4f36ec14cc67fcdd41c8ba146dc7d3fb07df9687b95efcd74ad8d0b15234dab4da83fa33391a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba67394a543c3210d8def880b2c07661cf7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f4b79f2763a2288644bbe0d29c4d4cb1da9b7f9ded1c69fc42465ed5ba385d6be8843ee4f48c9c913c00f1869c7d815313aa7081505001fe82a4e044e76d8cd4c3ee7460ec713f1048c453393734b3b7e85dbf2fff1ef1ad15024f9439039dc0000000000008151d0ab35986dd0c134c3c1f157b89cc39f"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb508}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) 04:00:35 executing program 0: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pause() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) 04:00:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:35 executing program 4: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdd2f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e17ae6525ae25fd8d9a014263697ca83c57fc2ead0d85a2bcc922a3aa71489fa0000c1a6ec9aa2e28000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596d80729476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a4fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb799d1084e7113c77ae25a0121de52e5e8cceddf2cb4b9895c0738fda3ea38c09e75b1f39ae8af2c746fbb43e3530767d8ee296487c0e650ead9003d032008fee2e02ece680c0d3d19b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f148ed2392ef113cbe241a98b4e8f3bf878f1dc0e115dd1c328f54369bc8dfd3a4ea21259ed518ae80606ef83d69b9d0d972b2231d05b2e31d61bf49ca69bdb0f57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fba93555853df9dbd3da536d88168217230eabfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be00500000095e31139b76417432c305d59cb68bff089979504c71418bd62ec60cfae7d75ce2adc8d4b2eabae5937b47e07da3f62be170ac03c7ae91659fc79fc36c84dd1b2b8972c5c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c843624027f7d55431a5756e4be9698bcd550c272c391cf24ea56d016e1f21b5999e1448f8784db6a9d4f36ec14cc67fcdd41c8ba146dc7d3fb07df9687b95efcd74ad8d0b15234dab4da83fa33391a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba67394a543c3210d8def880b2c07661cf7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f4b79f2763a2288644bbe0d29c4d4cb1da9b7f9ded1c69fc42465ed5ba385d6be8843ee4f48c9c913c00f1869c7d815313aa7081505001fe82a4e044e76d8cd4c3ee7460ec713f1048c453393734b3b7e85dbf2fff1ef1ad15024f9439039dc0000000000008151d0ab35986dd0c134c3c1f157b89cc39f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb508}], 0x1, 0x0) 04:00:35 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x90e, 0x0) 04:00:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000940)='./file0\x00', 0x1, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x0, 0x5}], 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0x41) syz_mount_image$qnx6(0x0, 0x0, 0x27, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0), 0x0, 0x8}, {0x0, 0x0, 0x200}, {&(0x7f0000000200), 0x0, 0x100}, {&(0x7f0000000300), 0x0, 0xffff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7}], 0x829042, &(0x7f0000000900)=ANY=[]) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000ac0)=0x9, 0x4) 04:00:35 executing program 3: mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x48) 04:00:35 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b700000000