[ 71.320330][ T27] audit: type=1800 audit(1582871159.630:27): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 71.342892][ T27] audit: type=1800 audit(1582871159.650:28): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.255664][ T27] audit: type=1800 audit(1582871160.630:29): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 72.276971][ T27] audit: type=1800 audit(1582871160.640:30): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. 2020/02/28 06:26:10 fuzzer started 2020/02/28 06:26:12 dialing manager at 10.128.0.26:34497 2020/02/28 06:26:12 syscalls: 2996 2020/02/28 06:26:12 code coverage: enabled 2020/02/28 06:26:12 comparison tracing: enabled 2020/02/28 06:26:12 extra coverage: enabled 2020/02/28 06:26:12 setuid sandbox: enabled 2020/02/28 06:26:12 namespace sandbox: enabled 2020/02/28 06:26:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/28 06:26:12 fault injection: enabled 2020/02/28 06:26:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/28 06:26:12 net packet injection: enabled 2020/02/28 06:26:12 net device setup: enabled 2020/02/28 06:26:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/28 06:26:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:30:11 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x181) set_thread_area(&(0x7f0000000040)={0x5ac, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20040, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0x42, ""/66}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)="029906fd342162498d785e2220816c37", 0x10}, {&(0x7f0000000180)="edee82ce436310e30b20be7a22f9584d9e2886c68a1460262ada5d8442216ef1c1267388288e1eb3550b9a75a1defa185d0c42ce4e630544ae1f364153e5a0b5b6e0a5c8d81dd42fcc30d7e1ed19aee8959dad0a049683c8372aeba14b2db0d2c7f6d7a7bd43e5c2bbf8d8f2897b3550a2b1e08e9d234fbc522b954b05764755521fb5237580fe53fe1b645a50919f084d457b968781b337b5201d190b1867ff08fe11d9f568feb1fc7d421f186e650952a7176f73c8107ba4957b9b1e76", 0xbe}, {&(0x7f0000000240)="9a0270cbcc", 0x5}, {&(0x7f0000000280)="937dbfaf2762fe74f57087d761fc330c5fda4a6ed9e7ffcefff34879411cc90d6fccac63195ceb88284efa124df8dd95b7bd99aa92a9ae2176d8a56840f9c3ea4086eb964064b2fc1c48ecabc2b4d57da94ea13e1d1b2536c8f6abdb96dab9c78e91f3f043ed34f8d10a2e96165b42464a52accb8e29cc8ff19bebcbdd41d794966378b466bbc1b535fd5348", 0x8c}, {&(0x7f0000000340)="6c06378b04467d8d019bb710638a4c4236040e9133ed0e7931cff535548c040423e4900236701200b7c9ea51554041a9f9e5d6cb16f5fadc78dc2af29d2ae27bc5392c44824e75697dd7dc07dfa94f2107b9b9a42c758f5f605ee2272fe766100ca88b216c49c8c0021e240e7f9b52eaa89b28fe832aa2b6dec266636051041d526c4aa38471bdca2e580a757dc93e950d9e52c8a58db81563b5764444fdb04b3e8d2a3c5359855fbdc17a3b431b106939e88a100351886ef793de82ac5203e0ccc2dc3df51c886b3a336261557bcede", 0xd0}, {&(0x7f0000000440)}, {&(0x7f0000000480)="64576564e0752255225495f4c51aadac15a7a43ace276023b7b13cffc163af65942600b153e479443b63", 0x2a}, {&(0x7f00000004c0)="9b3929", 0x3}, {&(0x7f0000000500)="380341b759aa78f02a8059845c931cb587614125c3b0761d938951b2a2dfcf9fa5581dc4723f5a10be5a32e13189700cfa9838b45b84f0c930272ab0b7abb1bc1da50210725aaeac9d1b1a5e30370b062be1e19e6371864bf35b05d1dc47575538059f6b14aa2208e49b159da29a6a72e2adc132cf57a4153ee72d74cb80f5d594e5dce35ea50339b6c79b35237a0b0faaef91f73001f3b62bb85de00c8dc013748f6bad43aeadc980ad42abb862d706", 0xb0}, {&(0x7f00000005c0)="035396b5ffb584a8866cf28e09f903a94ea9f290734a828c64581afc60aaba3ac251afdb3dd155fe250229335659ad59b63f1e30c461a0283309989ed0f234e17558004d68fa996bf55813b69cd856bb24730725a47d0199dc9edc21c5f825ae036b2f27223fccbf77a082cae4ac333dd8ff7c7705ae867994a0d6d7a0aad3ee3320b485a5636a25c10afd1961a8e66316f63219862da9db916c7961e6ba71edc97d42c6b4e3281f60dcbe38a6bd3b446beaa5a78b5a848ef2df5679274a6e592c6f19ce0799e7d286afa252345c3402017479518aec09fd236fa8f8d100878306c6d96a3c65fb49e9ab8df7e2ec", 0xee}], 0xa) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000940)=""/161, 0xa1}], 0x3, &(0x7f0000000a40)=""/121, 0x79}, 0x2143) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8844) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/capi/capi20ncci\x00', 0x100, 0x0) getpeername$llc(r4, &(0x7f0000000c80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000cc0)=0x10) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r5 = socket$isdn_base(0x22, 0x3, 0x0) lseek(r5, 0x8, 0x8caa342bbeb17ad) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000e00)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000f80)=0xffffff1c, 0x4) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) fallocate(r7, 0x8, 0x7, 0x7) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000001080)={0x9, "06f49ee832ee7a07199e2b0179384b34051453dc6b3149ace5906f2b923931cb", 0x0, 0x1}) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000010c0)=0x3f, &(0x7f0000001100)=0x2) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) link(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)='\x00') r8 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000011c0)={0x951b, 0x7, 0x4, 0x70000, 0x6, {0x77359400}, {0x2, 0x2, 0xdd, 0x4, 0x20, 0x0, "d707a950"}, 0x1, 0x4, @userptr=0x3, 0x7, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r9, 0xc0045520, &(0x7f0000001240)=0xffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000013c0)={0x7f, 0x5, 0x4, 0x40, 0x4, {r11, r12/1000+30000}, {0x5, 0x0, 0x0, 0x60, 0x3f, 0x6, "8764844a"}, 0xfffffffe, 0x4, @planes=&(0x7f0000001380)={0x7, 0x7, @fd, 0xfff}, 0x81, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001280)={0x4, 0x70, 0x5, 0xe0, 0x7, 0x6, 0x0, 0x3, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1ff, 0x7fffffff}, 0x3060, 0xa3a, 0x6, 0x0, 0x21a, 0xffffffff}, r10, 0x0, r13, 0x2) 06:30:11 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x960606e38b9fada9}, 0x80) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x80000000, 0x40040) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1966, @local, 0x68}, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @empty}, 0x10000}, @in6={0xa, 0x4e22, 0x7b38, @rand_addr="b9880942bff795d42caea41558d0c683", 0x7}, @in={0x2, 0x4e20, @multicast1}], 0x64) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1, @dev={[], 0x2a}}, 0x28, {0x2, 0x4e21, @local}, 'veth1_to_batadv\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r5, &(0x7f0000000300)=@nl, &(0x7f0000000380)=0x80) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x534, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x412f75f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ef3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6484c271}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc454}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x119f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x523c4b8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd62fa41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3970aa09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ec61480}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x748fdba4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc70}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf270}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8642}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa57a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656778a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ef3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa741}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7178f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8bb834}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec6a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa90e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fc53869}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeec3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x660aaf85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x526765bb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c352262}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10810524}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14cec927}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf816}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29bd9885}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20686819}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b237d4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1638a873}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc625}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75c15366}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8a9eff3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3390c7f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb64d2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18bd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x318a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffffc1cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x378ebc0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x531daa82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46a9783d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72e6c5b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73dec467}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1040e2d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x327b5175}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c478547}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14395f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbcec079}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c6215c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb52a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef01}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x92ea197}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb0f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d0f7cc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9930}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a59fc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba9fd44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x430ac70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe893c98}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe015}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc63b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd53439}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e10741}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fde4372}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ce4a603}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed969cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34ff0407}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c7c25fe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f11d9c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bdc95e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6072d977}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f6de07}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616c32d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49cb24e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x188f067a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x186a590b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c05841c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25fe5eac}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d2b4a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ced2e3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x389e38ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa54a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe786}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10fa406e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f7e6c60}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x687118fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x91484ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d307a2e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6834}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x938588c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x370daeaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x480ca42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a13720}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bdc815b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb90}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439c0e6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x318e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x945f}]}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x4004014}, 0x24000800) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000a00)={0x40, 0x1, 0x4, 0x10, 0x2, {0x77359400}, {0x5, 0x2, 0xbc, 0x39, 0x1, 0x5, "a4fb018b"}, 0x4, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) write$vhost_msg_v2(r7, &(0x7f0000000b40)={0x2, 0x0, {&(0x7f0000000a80)=""/65, 0x41, &(0x7f0000000b00)=""/18, 0x2, 0x2}}, 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000bc0)={0x0, 0x7ccb074, 0x20}, &(0x7f0000000c00)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000c40)={r8, @in6={{0xa, 0x4e22, 0x3d3, @local, 0x80000001}}}, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000dc0)={0xa20000, 0xffffff8f, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0xa00902, 0x0, [], @string=&(0x7f0000000d40)=0x8}}) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, &(0x7f0000000e00)=0x1) pipe2(&(0x7f0000000e40)={0xffffffffffffffff}, 0x84800) ioctl$SIOCX25SSUBSCRIP(r10, 0x89e1, &(0x7f0000000e80)={'bridge0\x00', 0x988e, 0x1}) syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000f80)={0x0, 0x0}) waitid(0x2, r11, 0x0, 0x2, &(0x7f0000000fc0)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000001080)={0x6, 0x9, 0x4, 0x4, 0x7, {}, {0x1, 0x2, 0x80, 0x1f, 0x20, 0x3f, "dc073491"}, 0x5, 0x2, @userptr=0x1ff, 0x1, 0x0, 0xffffffffffffffff}) getsockopt$nfc_llcp(r12, 0x118, 0x1, &(0x7f0000001100)=""/16, 0x10) r13 = add_key$keyring(&(0x7f0000001140)='keyring\x00', &(0x7f0000001180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r14 = request_key(&(0x7f0000001240)='pkcs7_test\x00', &(0x7f0000001280)={'syz', 0x1}, &(0x7f00000012c0)='\x00', 0x0) keyctl$search(0xa, r13, &(0x7f00000011c0)='id_resolver\x00', &(0x7f0000001200)={'syz', 0x0}, r14) syzkaller login: [ 323.236194][T10185] IPVS: ftp: loaded support on port[0] = 21 [ 323.435336][T10185] chnl_net:caif_netlink_parms(): no params data found 06:30:11 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x4}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x0, @multicast2, 0x4e21, 0x1, 'sed\x00', 0x5, 0x8001, 0x15}, {@multicast1, 0x4e24, 0x2000, 0x657, 0x3, 0x9}}, 0x44) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000100)={'rose0\x00', 0x8001}) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000140)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x80800) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000200)=""/70, &(0x7f0000000280)=0x46) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="5f162c22d02651b9c2e7832c037eca", 0xf}, {&(0x7f0000000300)="5a4dd0c0a609bd9861ca5326c14c760bcfb19ff9840c97a9bbd80c1c73ef6dddfea5ce8336e4a8a07c269c18fd13662c6ea93950186f4c86cf12d0936d7ec5a4cb7053565f449059dad9dacf36065055bdb9ffe1f009adea3f7c8f72aa2b7c4b6af95925c9e1ee55b277225df7b9de6df8dcaf57b49a1f3d5c6e55ed1d96c98e324abdf6920cd12cdfb9202c485b4b57e6a87d2323939c5ffc401552d8c7d4f24934465b11d4b5489300814b82c583f354676ddc3fba", 0xb6}, {&(0x7f00000003c0)="f9e1e115dae5084338fad41d7ffeba90cf04", 0x12}], 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r1}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000480)={0x0, 0xffffff7f}, &(0x7f00000004c0)=0x8) r4 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x1f, 0x155a02) connect$pppl2tp(r4, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @remote}, 0x4, 0x0, 0x0, 0x1}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c40)='memory.events\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000001c80)) modify_ldt$write2(0x11, &(0x7f0000001cc0)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r6 = syz_open_dev$audion(&(0x7f0000001d00)='/dev/audio#\x00', 0x0, 0x161000) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x4c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x82}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x927f}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2ba1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x24044001) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001e80)={'nr0\x00', {0x2, 0x4e22, @remote}}) ioctl$USBDEVFS_RESET(r5, 0x5514) r7 = syz_open_dev$sndpcmc(&(0x7f0000001ec0)='/dev/snd/pcmC#D#c\x00', 0x5c1, 0x20002) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/vcs\x00', 0x40000, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000001f40)={0x1, {0x7b8, 0x1, 0x10000, 0xfffffffe}}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/ppp\x00', 0x400901, 0x0) ioctl$PPPIOCGDEBUG(r9, 0x80047441, &(0x7f0000001fc0)) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002000)='/dev/autofs\x00', 0x40, 0x0) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0) fchmod(r7, 0x190) r11 = accept4$netrom(r5, &(0x7f0000002040)={{0x3, @bcast}, [@netrom, @rose, @remote, @default, @rose, @bcast, @default, @rose]}, &(0x7f00000020c0)=0x48, 0x100c00) ioctl$sock_SIOCADDDLCI(r11, 0x8980, &(0x7f0000002100)={'caif0\x00', 0x7f}) [ 323.529326][T10188] IPVS: ftp: loaded support on port[0] = 21 [ 323.638126][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.645357][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.669048][T10185] device bridge_slave_0 entered promiscuous mode [ 323.682897][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.691570][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.700062][T10185] device bridge_slave_1 entered promiscuous mode [ 323.733365][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.753058][T10193] IPVS: ftp: loaded support on port[0] = 21 [ 323.762535][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.848135][T10185] team0: Port device team_slave_0 added [ 323.864844][T10188] chnl_net:caif_netlink_parms(): no params data found [ 323.878170][T10185] team0: Port device team_slave_1 added 06:30:12 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0x0, 0x3, {{0x6, 0x1, 0x6, 0x7fff, 0x2, 0x8, {0x1, 0x2, 0x101, 0x7fb26fd5, 0x8, 0x0, 0x0, 0x9, 0x8, 0xfffffffb, 0xdb8, r1, r2, 0x5, 0xf2eb}}}}, 0xa0) r3 = dup(0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000380)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x145882, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x20000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '}*}$em1vmnet0:'}}, {@cachetag={'cachetag', 0x3d, '\'^'}}, {@mmap='mmap'}, {@access_any='access=any'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>'}}]}}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000540)=0xffffc85f) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vcsa(&(0x7f0000001f40)='/dev/vcsa#\x00', 0x9, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001f80)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x97c, 0x8c89, 0x1, 0x10000, 0x5}, &(0x7f0000002040)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002080)={r7, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000002140)=0x84) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82800) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, &(0x7f00000021c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002200)=0x0) migrate_pages(r9, 0x6, &(0x7f0000002240), &(0x7f0000002280)=0xff98) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000002300)={0x9b0000, 0x0, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000022c0)={0x990a69, 0xe07, [], @ptr=0x7ff}}) timerfd_gettime(r10, &(0x7f0000002340)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002380)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r11, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8c00100}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x34, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfb, {0x5, 0x0, 0x1, r9, 0x8, 0x4, 0x23, 0x0, 0x1f}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x1) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r12, 0x65, 0x6, &(0x7f0000002500)=0x1, 0x4) r13 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002540)='/dev/video37\x00', 0x2, 0x0) r14 = userfaultfd(0x800) ioctl$VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f0000002580)={0x4, 0xc, 0x4, 0x8, 0x3f, {}, {0x2, 0x1, 0x8, 0x3, 0x8, 0x8f, "0a44c214"}, 0x2, 0x1, @offset=0x7, 0x40, 0x0, r14}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000002600)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x7fff, @ipv4={[], [], @multicast2}, 0x9}], 0x3c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002640), &(0x7f0000002680)=0x4) openat$cgroup_ro(r5, &(0x7f00000026c0)='cpu.stat\x00', 0x0, 0x0) r15 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002700)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002d80)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000002e80)=0xe8) sendmsg$inet6(r15, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002740)="ce931b993b54cb511c54c397b011dec3b6574d66c273e5eee284402ec62ddea8ea7cb27956c8e67fd855f53cd37e4b3be6e938af99c0e672b12033c1d713a25a43f64bd01cf1e8292d3edb23c62ef86b1ac96bb40350e91e785bcdd5bb68422a04e0cb0d5b90e40b1d61e8cb10bdb67159c372aa12e99c2fd51f13cf6d8e7186554d8bd14f5aaa9821446e79880640c7bd76f94e209f065bed63b233a9e5", 0x9e}, {&(0x7f0000002800)="e0b09f3c100107d79a172f269c649e964b54b6d89542ac33e2db8a650ab2a69a7eda82f7959151ed5f8f95507460e28ef4ecd5cbb578ab59cb084101f81dd7fde4eb980904172278f8e7e86f88e108c0f8810e8f3c9e068d1628681162894982c2e9fce9c35d18b8acb5830690196a0a13882da7555604817a933d27dcac3fbe8827a8eb254ea337114e4435d9663eca6f4491ef3ba9ef6430f403a255eb33ef6ff38b07e37e2b6afb7f87c7d7f868fac83689b3155a56dc605ade9aa5f9d5920123c60f939e4e135c9d1c98e4060e6b6266c37a05", 0xd5}, {&(0x7f0000002900)="7d50ab1aaab3957454cab2546a94129211d816ccd87bdafee09fe094bf1a6809a740335ff485631549b8de0cb04975073b33b743ee1a5641724092d6349a42265a3a806d328adc45272eae751c1b6860b207851d1874a5b1de40ee5395079eb296abbde14142b8f516d2a1c91bf1a4344f10c6526c4800c433a5f62c7158b052c895d4bd0df5d966fe5b54ac19431923b70f2d555e7e94655d99843925d2e10f", 0xa0}, {&(0x7f00000029c0)="d4b1deb5fadd9393588c97b3079fb324816d6b37f1227ffea1a32cb1e9609762b1bb0c3a8dc0424b7980547d2d384eb19a4d293ac51b7cd07af996bbc8c65fbc61d876c7fc166272dd7f6776aaa0f80bf07869af2ddf68e53af58180d2548a6349768cf18b1edcbc8b6085a35896ba242a65e5997fac0464733add4532c6d2af2a6e33bfd149b1bcd17ce948a7e5ca0762585f", 0x93}, {&(0x7f0000002a80)="fdbc2ef6cec1d0d511ef1f85181f360d7f9c23bb40b7a40f264b3d23a3e39fb7d14198114bf187748174148e9fc9f23cb09048fd2e29e2201033c32109ff2eee64f341d077df07e682baab564a1ee175d3e2072e792f4a69f8bc7022ab8c24bbb434e9efc577fcfe417438080419123fe0901aca76c0419fad170834936caae7b3", 0x81}, {&(0x7f0000002b40)="38f17f10e1b51d9e44681bddba8903b8c5a5a9d04906ea93c3cc320fced1881887e29456a15f132497abfdae176594d8114f677e4a654d7a4381db844409c73483e8f13dde1fe79cb828385488540a8999b8912098c03dafb55760d0b0ccf8354fe9d34c995c7a1598d50972370c48f2654841b24e998723d72e8807d264d12cd3c5a901c464ad5b2df2a150470d4fcc44e11d6ef2a9d3259484819dd0f9a1edbee035f5bb40f5f1b918386a6a25ac2c23de035f8b4e4d8f699da9921d4450636637d023546f2848851e49e7cc71a38a45", 0xd1}, {&(0x7f0000002c40)="9dc5a8c6ad8c902208a916a271a08984ea65eefafef1b3526929500557262903845e8dacadb6f7532d332622682956ed5d8f594aed88837d887c7a", 0x3b}, {&(0x7f0000002c80)="4090d63321669e099cc1d4e7fa5b68176e3fa50714df6c29cb8e637beacb31aa99a383f6be92b8fc099633508a67ba21682e121e162b303d5f6e189c965fe78b88a4625f8c52d4aa4ab75329f7373a831929834a7b4aea4317a21b2a4c4cb37d2222fd34aaa3505df08543b1", 0x6c}], 0x8, &(0x7f0000002ec0)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x2c, 0xd, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8c, 0x6, [0x3, 0x1]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xb}}, @jumbo={0xc2, 0x4, 0xffe0}, @calipso={0x7, 0x28, {0x2, 0x8, 0xc9, 0x9, [0x0, 0x0, 0x1, 0x6]}}, @ra={0x5, 0x2, 0x800}, @pad1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x2, 0x4, 0x0, [@loopback, @loopback, @mcast1, @rand_addr="4b4a672021b1624a1b77e870c94cf11b", @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xb4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hopopts={{0x1038, 0x29, 0x36, {0x1d, 0x203, [], [@pad1, @enc_lim, @ra, @calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x4}}, @ra={0x5, 0x2, 0xff}, @generic={0x40, 0x1000, "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"}]}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x8, 0x10, [], [@ra={0x5, 0x2, 0xc53}, @generic={0x3, 0x75, "ec4ee190085ebe7413f616e991543a622ab73f049fba41cf2cf1738852da01c54d5252ac3a6b97d1fcc91988a44034cc61a82e52a89aef3989f417202cb8000374a87dd257f00991f5d08e3b9a5dec3c65fd45e9a5ffe91a727080918b6fdaf444187bbfff242b2c1d24b9c25b04f2e91248e15ba6"}, @jumbo={0xc2, 0x4, 0x2000000}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r16}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xb79}}], 0x1250}, 0x4000001) [ 323.918964][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.925945][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.984367][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.012059][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.027568][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.053703][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.141045][T10185] device hsr_slave_0 entered promiscuous mode [ 324.177903][T10185] device hsr_slave_1 entered promiscuous mode [ 324.273376][T10200] IPVS: ftp: loaded support on port[0] = 21 [ 324.290481][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.304164][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.312812][T10188] device bridge_slave_0 entered promiscuous mode 06:30:12 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x102) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x9, 0x6, 0x3f, 0x200, '\x00', 0x4}) r2 = dup(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0xffff, 0x2, 0x4, 0x100, 0xe4, {0x0, 0x2710}, {0x3, 0x1, 0x8, 0x0, 0x6, 0x4, "0a7ec495"}, 0x2, 0x3, @userptr=0x7, 0x28, 0x0, r3}) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0xfffffeff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{}, {@fixed}]}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x54) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000004c0)={0x0, 0x714, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x9b090d, 0x9397, [], @p_u8=&(0x7f0000000440)}}) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000500)={0x57, ""/87}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000005c0)={0x980000, 0x100, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x9909dd, 0x4, [], @value64=0x7ff}}) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000600)) r8 = open(&(0x7f0000000640)='./file0\x00', 0x28000, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r8, &(0x7f0000000680)="1491489eb0e317e07eeb5aec45acfbc194b1dd2aca28fdee0cee5adc18c43bbca94bd07b538b4320933ebf30d382be7181f855960045e5baf5da346521948e5d857292a11c9ae7fd99418c4723cd6afdc7325ff5ce54c7a0164d59", &(0x7f0000000700)=""/105}, 0x20) r9 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0xffff, 0x8a240) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000800)={0x0, 0x1}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000880)={r10, 0x4}, &(0x7f00000008c0)=0x8) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000900)=0x401, 0x4) r11 = accept(0xffffffffffffffff, &(0x7f0000002000)=@isdn, &(0x7f0000002080)=0x80) getsockname$netrom(r11, &(0x7f00000020c0)={{0x3, @default}, [@remote, @rose, @default, @netrom, @remote, @bcast, @null, @netrom]}, &(0x7f0000002140)=0x48) fcntl$getown(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x8) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vcs\x00', 0x240100, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002200)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r12, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x24, r13, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x20048880) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002300), &(0x7f0000002340)=0x14) r14 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$GIO_FONTX(r14, 0x4b6b, &(0x7f0000002780)={0xf1, 0x1d, &(0x7f0000002380)}) [ 324.343146][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.351947][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.360369][T10188] device bridge_slave_1 entered promiscuous mode [ 324.384017][T10193] chnl_net:caif_netlink_parms(): no params data found [ 324.462671][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.539665][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.697206][T10188] team0: Port device team_slave_0 added [ 324.706941][T10188] team0: Port device team_slave_1 added [ 324.711173][T10205] IPVS: ftp: loaded support on port[0] = 21 06:30:13 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x252ec2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x1c0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x8f, 0x7, 0x1, 0x3, 0x3, "4bd128fd9ab2435d5f76942065fc52e77ab189", 0x1, 0x98a4}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x42280, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x124) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x255b7f0b}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x81) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/22) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000380)={0xa, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x2, 0x7ff, 0x37, 0x3f, 0x1, 0x80000000], 0x7, 0x0, r5, r6}) r7 = semget(0x0, 0x0, 0x80) semctl$GETPID(r7, 0x2, 0xb, &(0x7f0000000440)=""/178) kexec_load(0x7, 0x4, &(0x7f00000007c0)=[{&(0x7f0000000500)="ab52e63b155bfcb4de7668ade1fc677daff88e4cd3944841639d347fdc959b715a812ac3d5f2eab9cc04bf27a18aaff01b94f8ef1bab5ebc2962a982498b70aec328f81bd4838be8bcabc2b54ef12cb5ba816e3cedae5856d216c9e957cd9265003dc913646429441392918741", 0x6d, 0x5}, {&(0x7f0000000580)="664211f103d5f6aeb3a615129f1b3a", 0xf, 0x0, 0x4800000000000000}, {&(0x7f00000005c0)="3b980f989f3d48c7c9a31df058bb80a3a1868e6c6d3692ad557871e98015dad3279e2fbe62857c00e9cfc7bea86bdd421f6f59c293c5e7f0dba18ab9700191c1f167f2cc62383c99b929744b3fa90d3fc51cc15ac3ea99d6c52f01c0e43003cec3216ca8bf0394df53d8916a399f92cf45bcbc782c9a72b16b1d69d2a7e52f871670aa9d67fbd6c10e37dfa08bcd4c442bccb008dd0966cd33631323c6a55252c06fa42e172c7a5348078702d7954582c0f98b2aa7b53016eef434b3b42b719612b6d4743c0cbe6be4a5efdd4e20b06e5ef6f3009de0a8b43b12d19c2cce", 0xde, 0x2d}, {&(0x7f00000006c0)="914cc53fac3456d1c4bfa6020f00c380cf10924ec6096200805ba3d66fa8938f5af48b65c3e6729ee613be630283f233cf9bcb4db73d409c1bb2394d367d8815704ba75e91f77e3e7e81a2215552edf3b7de76e012b008788b4bb2677319b9acca8eaa5ea24aa5c54cad473e266dc193ea805bd2ed42db8e9a55f36e15cafc41cabed05aa27c8fe884ae7e326384d6d9050a48c89aeaf88cef2b76013a4345b4e501ebcc7458a043b8e4afbc80475e997d1f4520001962900888f912da69cd88be60224483614bc01ef72bbb83464a20c447a255", 0xd4, 0x401, 0x2}], 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000008c0)={0x990000, 0x0, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x9e0902, 0x5362, [], @p_u32=&(0x7f0000000840)=0x7f}}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000900)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000940)={r9}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980)='/dev/nvram\x00', 0x109042, 0x0) ioctl$KDSKBMODE(r10, 0x4b45, &(0x7f00000009c0)=0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000a40)={0x8, 0xc, 0x4, 0x10000, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x7f, 0xff, 0x5, "8241ac4e"}, 0x5, 0x2, @planes=&(0x7f0000000a00)={0x0, 0x7ff, @userptr, 0xa01}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(r11, 0x4) r12 = open(&(0x7f0000000ac0)='./file0\x00', 0x101000, 0x0) ioctl$CAPI_NCCI_GETUNIT(r12, 0x80044327, &(0x7f0000000b00)) r13 = syz_open_dev$vcsu(&(0x7f0000000b40)='/dev/vcsu#\x00', 0x8001, 0x10000) getsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) prctl$PR_GET_TSC(0x19, &(0x7f0000000c00)) recvfrom$unix(r8, &(0x7f0000000c40)=""/4096, 0x1000, 0x40000000, &(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 324.766652][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.777704][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.809247][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.842403][T10200] chnl_net:caif_netlink_parms(): no params data found [ 324.858099][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.865312][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.878700][T10193] device bridge_slave_0 entered promiscuous mode [ 324.901305][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.908391][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.934491][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.965462][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.973079][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.983693][T10193] device bridge_slave_1 entered promiscuous mode [ 325.013539][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.041903][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.092125][T10185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.179319][T10188] device hsr_slave_0 entered promiscuous mode [ 325.217983][T10188] device hsr_slave_1 entered promiscuous mode [ 325.257821][T10188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.265797][T10188] Cannot create hsr debugfs directory [ 325.278758][T10211] IPVS: ftp: loaded support on port[0] = 21 [ 325.297852][T10185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.351670][T10193] team0: Port device team_slave_0 added [ 325.366967][T10193] team0: Port device team_slave_1 added [ 325.420930][T10185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.492614][T10185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.583345][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.595679][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.603908][T10200] device bridge_slave_0 entered promiscuous mode [ 325.623455][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.630703][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.656914][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.668843][T10205] chnl_net:caif_netlink_parms(): no params data found [ 325.691494][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.698785][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.706614][T10200] device bridge_slave_1 entered promiscuous mode [ 325.731804][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.738919][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.765446][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.795401][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.811656][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.919359][T10193] device hsr_slave_0 entered promiscuous mode [ 325.957817][T10193] device hsr_slave_1 entered promiscuous mode [ 325.997584][T10193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.005205][T10193] Cannot create hsr debugfs directory [ 326.032083][T10200] team0: Port device team_slave_0 added [ 326.073148][T10200] team0: Port device team_slave_1 added [ 326.097945][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.105133][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.113348][T10205] device bridge_slave_0 entered promiscuous mode [ 326.134926][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.142220][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.150570][T10205] device bridge_slave_1 entered promiscuous mode [ 326.178792][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.185773][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.213179][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.225797][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.232903][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.259910][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.327120][T10205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.391864][T10205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.492347][T10200] device hsr_slave_0 entered promiscuous mode [ 326.547972][T10200] device hsr_slave_1 entered promiscuous mode [ 326.587572][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.595160][T10200] Cannot create hsr debugfs directory [ 326.641300][T10211] chnl_net:caif_netlink_parms(): no params data found [ 326.661822][T10188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.706482][T10188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.764356][T10205] team0: Port device team_slave_0 added [ 326.791202][T10188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.860829][T10205] team0: Port device team_slave_1 added [ 326.866745][T10188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.955991][T10205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.963443][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.990108][T10205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.005570][T10205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.013764][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.039992][T10205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.149683][T10205] device hsr_slave_0 entered promiscuous mode [ 327.188113][T10205] device hsr_slave_1 entered promiscuous mode [ 327.227814][T10205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.235407][T10205] Cannot create hsr debugfs directory [ 327.300264][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.307356][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.315614][T10211] device bridge_slave_0 entered promiscuous mode [ 327.349072][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.359438][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.366526][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.374891][T10211] device bridge_slave_1 entered promiscuous mode [ 327.392317][T10193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.470827][T10193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.518450][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.556422][T10193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.594249][T10193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.640938][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.666549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.675588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.720363][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.730009][T10211] team0: Port device team_slave_0 added [ 327.745220][T10200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.784632][T10200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.840678][T10211] team0: Port device team_slave_1 added [ 327.871619][T10200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.912437][T10200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.971344][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.980480][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.989339][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.996572][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.023860][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.031164][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.058379][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.074631][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.082250][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.109130][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.130923][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.152207][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.231058][T10211] device hsr_slave_0 entered promiscuous mode [ 328.267949][T10211] device hsr_slave_1 entered promiscuous mode [ 328.307689][T10211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.315284][T10211] Cannot create hsr debugfs directory [ 328.331176][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.339925][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.348522][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.355562][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.365011][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.415874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.426023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.433967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.471036][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.480576][T10205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.552024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.562344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.588814][T10205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.641671][T10205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.721588][T10205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.784949][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.793303][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.802177][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.812168][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.821263][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.830920][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.838006][T10199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.845886][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.854643][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.863174][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.872060][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.881750][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.942733][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.951542][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.965785][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.974522][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.981635][T10199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.989529][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.049964][T10193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.094243][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.118076][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.125774][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.134394][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.145480][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.155250][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.180634][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.198902][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.206862][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.220231][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.237034][T10193] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.251825][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.262788][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.301957][T10188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.313657][T10188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.348608][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.357061][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.371020][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.380468][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.389604][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.398673][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.406992][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.414073][T10199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.421901][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.430885][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.439544][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.446612][T10199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.454374][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.462195][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.491911][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.500965][T10211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.572368][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.580815][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.589628][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.599425][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.620736][T10211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.716428][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.727791][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.736467][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.749161][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.758415][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.765475][T10227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.773454][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.782541][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.791362][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.799126][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.806563][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.815654][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.824539][T10211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.890376][T10211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.934463][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.954133][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.962614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.972879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.982005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.991526][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.998676][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.006794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.015633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.025508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.033622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.058886][T10185] device veth0_vlan entered promiscuous mode [ 330.084787][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.093841][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.103465][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.121496][T10205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.146565][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.155577][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.167406][T10185] device veth1_vlan entered promiscuous mode [ 330.196491][T10193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.232978][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.255927][T10205] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.281635][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.291736][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.301454][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.311082][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.321599][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.334457][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.345412][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.354197][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.363272][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.378243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.387098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.407821][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.420728][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.430266][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.437355][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.463739][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.473091][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.483727][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.495322][T10185] device veth0_macvtap entered promiscuous mode [ 330.524103][T10200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.534837][T10200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.554557][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.563257][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.571828][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.582266][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.591177][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.600208][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.607278][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.615126][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.623691][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.632663][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.643595][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.652004][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.663338][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.671666][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.680243][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.695723][T10188] device veth0_vlan entered promiscuous mode [ 330.712296][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.727183][T10185] device veth1_macvtap entered promiscuous mode [ 330.735676][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.744878][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.799248][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.814249][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.823993][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.832557][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.840092][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.848045][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.856910][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.865655][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.875176][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.910234][T10188] device veth1_vlan entered promiscuous mode [ 330.925654][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.933907][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.943014][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.952038][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.970777][T10211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.006793][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.025105][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.036368][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.045941][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.054712][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.086754][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.104051][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.114283][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.124350][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.132941][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.141889][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.151338][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.160598][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.169111][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.178478][T10193] device veth0_vlan entered promiscuous mode [ 331.205301][T10211] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.226102][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.236691][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.246814][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.259272][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.273669][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.280777][T10228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.358125][T10188] device veth0_macvtap entered promiscuous mode [ 331.377296][T10193] device veth1_vlan entered promiscuous mode [ 331.386599][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.399110][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.406974][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.415646][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.423959][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.433445][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.445778][T10205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.502236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.510811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.519431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.535543][T10188] device veth1_macvtap entered promiscuous mode [ 331.552166][T10200] device veth0_vlan entered promiscuous mode [ 331.599512][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.608615][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.616785][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.625592][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.634033][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.643514][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.652116][T10228] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.659238][T10228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.666840][T10228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.718131][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.727037][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.737387][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.756375][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 331.784637][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.799747][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.830530][T10200] device veth1_vlan entered promiscuous mode [ 331.847680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 331.855953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.866348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 06:30:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x200}, 0x20}}, 0x0) [ 331.877719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.886513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.895326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.904189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.913803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.938513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.947219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.970893][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 331.985151][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.005818][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.028026][T10211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.041791][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.051877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.060651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.070006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.079552][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.089069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.098013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.120512][T10193] device veth0_macvtap entered promiscuous mode 06:30:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) getsockname$ax25(r2, &(0x7f0000000200)={{0x3, @netrom}, [@netrom, @remote, @netrom, @rose, @remote, @netrom, @null, @null]}, &(0x7f0000000280)=0x48) sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) r3 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x2) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000040601080000000000000000000000070900020073797a32000000000900020073797a310000000005000100070000000900020073797a300000000005000100070000000500010007000000ab282097e9000c53fde38fcfe381aea4dd101acb1fb0a54f265024c8288e65f71189459313d9acdfc2fe6a1878bd00ebc9c998e7d9a48a4462c586bfbee19cf2dc25301b3a83518c42ecdcef70a340c2607a1bf954d4dbe61f03ac"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x8d0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0xb, 0x2}, 'port1\x00', 0xa3d54bfa4bed8097, 0x4, 0x5, 0x0, 0x2, 0xfff, 0x2, 0x0, 0x8, 0x3}) connect$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 332.181299][T10193] device veth1_macvtap entered promiscuous mode [ 332.281687][ C0] hrtimer: interrupt took 30917 ns [ 332.306143][T10205] device veth0_vlan entered promiscuous mode [ 332.339986][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.355602][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.401476][T10211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.480928][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.492997][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.501187][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.508870][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.516322][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.525100][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.536931][T10205] device veth1_vlan entered promiscuous mode [ 332.546763][T10200] device veth0_macvtap entered promiscuous mode [ 332.601072][T10200] device veth1_macvtap entered promiscuous mode [ 332.619822][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 06:30:21 executing program 0: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) r0 = inotify_init() ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) read(r0, &(0x7f0000000040)=""/39, 0x27) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x100000081000100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) r4 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x8001) sendfile(0xffffffffffffffff, r4, &(0x7f0000000380)=0x7ff, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r5, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f00000018c0)) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r2, r0) creat(&(0x7f00000000c0)='./control/file0\x00', 0x0) [ 332.644582][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.666026][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 332.704104][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.750259][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.777536][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.785661][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 06:30:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000108002100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001a80090002800c000180780e00000000000008001b0000000000"], 0x3c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000496e99eaac04dfa2624c47b52307001001002d"], 0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x60000010}) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x83000000) [ 332.796248][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.805164][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.814090][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.824034][T10218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.836004][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.880985][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.897586][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 332.914901][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.926921][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.971923][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.983120][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.993272][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.003489][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000300)={0xd42, 'syz0\x00'}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x4047) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0xfdfdffff) [ 333.013433][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.024296][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.035928][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.046542][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.057335][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.067899][T10267] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.080692][T10267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.091399][T10267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.104482][T10267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.145009][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.156722][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:30:21 executing program 1: r0 = getpid() syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5, 0x82) creat(&(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000028c0)) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="f500040007001001002d588e1cc109282d42ece5e4fb5fc981abacd7dd29a88c1def83e3a46898fd2e15adda244123038804b31589b3f97334378dd1d64ea0f083ead57aa9b1f2cf9f"], 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) r3 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x8001) sendfile(0xffffffffffffffff, r3, &(0x7f0000000380)=0x7ff, 0x7) r4 = dup2(r2, r3) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000340)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x88) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) ptrace$setregs(0xf, r6, 0x8, &(0x7f00000000c0)="cc") syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xf87, 0x200000) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1000000000000108, &(0x7f0000000a40)=[{&(0x7f0000000140)=""/31}, {&(0x7f0000000700)=""/89}, {&(0x7f0000000780)=""/129}, {&(0x7f0000000840)=""/148}, {&(0x7f0000001380)=""/4096, 0xffba}, {&(0x7f0000000900)=""/81}, {&(0x7f0000000980)=""/150}], 0x381, 0x0) [ 333.222064][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.238118][T10273] overlayfs: filesystem on './file0' not supported as upperdir [ 333.244509][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.276654][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.294470][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.321285][T10205] device veth0_macvtap entered promiscuous mode 06:30:21 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x9d0000, 0x101, 0x3, r0, 0x0, &(0x7f0000000040)={0x9b0001, 0x16c6, [], @p_u32=&(0x7f0000000000)=0x789b}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xaa82, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r3, 0x0, 0x0, 0xff, 0x7}, &(0x7f0000000180)=0x18) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000000, 0x2) [ 333.352818][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.391238][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:30:21 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000260007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 333.406988][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.433231][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.455265][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.474798][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.494139][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.505785][T10205] device veth1_macvtap entered promiscuous mode [ 333.565595][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.576318][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.590954][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.695099][T10211] device veth0_vlan entered promiscuous mode [ 333.718775][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.729795][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.740239][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.757792][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.777533][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 333.797476][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.820550][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.855455][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.889972][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.915532][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.928269][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.938401][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.949359][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.960212][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 333.970700][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.982615][T10205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.991970][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.001277][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.010009][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.018963][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.027997][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.036831][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.047060][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.055173][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.108449][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.126322][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.137053][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.150199][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.160586][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.171896][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.182358][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.193448][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.206677][T10205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.272364][T10211] device veth1_vlan entered promiscuous mode [ 334.283269][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.294799][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.303778][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:30:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000e, 0x40000000000a132, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) recvfrom(r2, &(0x7f0000000200)=""/183, 0xb7, 0x12070, &(0x7f00000002c0)=@ipx={0x4, 0x2, 0x8, "fc6afbf8a5e3", 0x6}, 0x80) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000080), &(0x7f0000002600)=0x4) [ 334.620647][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.645553][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.672859][T10211] device veth0_macvtap entered promiscuous mode 06:30:23 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) bind(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x80) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x9e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081026e7230000000000076c5f72512b55c4618238800002000000000007465616d30000000000000c76ecf6f15366d0000000000004000000076653468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb00000000000000"]}, 0x112) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0xa30004, 0x3f, 0x15, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9d0001, 0x34d9ee16, [], @p_u8=&(0x7f0000000080)=0x3}}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000240)=0x8001) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2000) r5 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xff9f, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e20700bd0500fddb5f2502000000084d02000200a8086a8e35636955000008118f54a313a306"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000428bd7040ffdbdf2503000000090002004111bf27ad8f30b21158753cf6426806a53a97f445480b05c71dc1b3b64d0350ac110a7c08d1b8f8ce585f9c6b40a5c9a59474d1c5c884752c981ab8a86dda0c869e204766cfbf8e55be3e3220044491"], 0x1c}}, 0x4404) bind(r1, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x80) [ 334.745529][T10211] device veth1_macvtap entered promiscuous mode [ 334.832341][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.854958][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.870119][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.891892][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.902661][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.913750][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.925304][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.936303][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.946489][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.957770][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.969269][T10211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.989898][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.001693][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.013629][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.022406][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.034322][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.048923][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.059426][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.080207][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.101144][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.121413][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.131387][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 06:30:23 executing program 4: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0x1f}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 335.131425][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.131444][T10211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 335.131456][T10211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.133332][T10211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.204945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.218580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:30:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x65c, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700a554a48500000000002288", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000100", @ANYRES32], 0x38}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x2f, 0x1, {0x7, 0x1f, 0x3f, 0x106, 0x27, 0x6, 0x1f, 0x5}}, 0x50) 06:30:23 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000000c0)={0xcf, 0xff, 0x605e}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275916edf59f5b078e5732c776f726b6469723d2e2f66696c65312c7570706572646972"]) rmdir(&(0x7f0000000080)='./bus/file0\x00') ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000200)) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) r2 = gettid() unlink(&(0x7f0000000140)='./file1\x00') ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0x4, 0x21, 0x8001, 0x1, 0x1, r2}) 06:30:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) r2 = accept4(r1, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x800) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000000c0)=""/37, &(0x7f0000000100)=0x25) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x2c}}, 0x0) 06:30:23 executing program 1: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 06:30:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x8001) sendfile(0xffffffffffffffff, r4, &(0x7f0000000380)=0x7ff, 0x7) r5 = fcntl$getown(r4, 0x9) ptrace$peekuser(0x3, r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r6, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r7, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f00000018c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r8, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f00000018c0)) pipe2(&(0x7f00000001c0), 0x84000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f00000028c0)) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x0, 0x7fff, r1, 0x0, &(0x7f0000000100)={0x990af8, 0x800, [], @p_u16=&(0x7f0000000040)=0x81}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @dev}, &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r12, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5801}, 0x8804) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x10, @link_local, 'bond_slave_1\x00'}}, 0x1e) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb92e0a480e0a0f000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) 06:30:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00299b80fcffffffffffffff2e64eb2d00f50000000000"], 0xa) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xfffffffffffffbff, 0x20180) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000038c0)) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000018c0)) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r5, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f00000018c0)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x310, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0xe4}, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000100)=0xf8) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 335.646681][T10331] overlayfs: unrecognized mount option "upperdir" or missing value 06:30:24 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x40004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e002e000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) [ 335.991861][T10333] syz-executor.4 (10333) used greatest stack depth: 22384 bytes left 06:30:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0) ioctl$KVM_NMI(r1, 0xae9a) 06:30:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000f00fb8)={0xb, 0x5, &(0x7f0000b0afd8)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000fe9000)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000e18000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r1, 0x0, 0x209) [ 336.486156][T10354] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop3 scanned by syz-executor.3 (10354) [ 336.756950][T10354] BTRFS error (device loop3): superblock checksum mismatch [ 336.793982][T10354] BTRFS error (device loop3): open_ctree failed 06:30:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000018c0)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000080)=']:proc\x00', &(0x7f00000000c0)='./bus\x00', r4) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000040)=0xcf43) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(r0, 0xc, &(0x7f0000000100)={0xc585}, &(0x7f0000000140)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) dup(r1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0x4) 06:30:25 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x404, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x0, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff}, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x80024, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache='fscache'}, {@access_any='access=any'}, {@uname={'uname', 0x3d, ':selfcgroupcgroupsystemppp1user}'}}, {@mmap='mmap'}, {@access_user='access=user'}, {@posixacl='posixacl'}, {@nodevmap='nodevmap'}]}}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80487436, 0x0) shutdown(r3, 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000100)={0x7, 0x4, 0x4, 0x10, 0xffff, {0x77359400}, {0x1, 0x8, 0x83, 0x70, 0x1, 0x8, "566eae53"}, 0x4, 0x4, @offset=0x6, 0x8034, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x7f, 0x4) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x8010, 0xffffffffffffffff, 0x19000) r7 = dup3(r0, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r7, 0x80045500, &(0x7f0000000080)) 06:30:25 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x400) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0x2}, 0x28, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7fffffff}, 0x0, 0x0, 0x0, 0x9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) lremovexattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e00055cf04b59cc586dce89021198532e850884195de6b1d624f0249040"]) r5 = socket(0x10, 0x0, 0x0) r6 = socket(0x10, 0x800000000080002, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000280), 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) sendto$rose(r5, &(0x7f0000000040)="d872d4949f", 0x5, 0x4000004, 0x0, 0x0) 06:30:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040)='/dev/video35\x00', 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000028c0)) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000280)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001080)={0x9}) 06:30:25 executing program 3: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 06:30:25 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}}, &(0x7f0000002fc0)=""/236, 0x32, 0xec, 0x8}, 0x20) sendmmsg$sock(r0, 0x0, 0x0, 0x40400c0) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000180), &(0x7f00000030c0)=0x4) open(0x0, 0x141042, 0x0) close(0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400) 06:30:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x20c480, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/4107, 0x100b}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 06:30:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x20, 0x7, 0xa13, "b022f07755c7579613ddf0bea4c3fcd760cc596d205d64add3f2cf9f90855039"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8000, 0x0) [ 337.796837][T10396] BPF:[1] ARRAY (anon) [ 337.798826][T10391] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 337.824065][T10396] BPF:type_id=5 index_type_id=1 nr_elems=0 [ 337.831038][T10396] BPF: [ 337.833824][T10396] BPF:Loop detected [ 337.837726][T10396] BPF: [ 337.837726][T10396] [ 338.064033][T10397] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 338.083155][T10411] mmap: syz-executor.0 (10411) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:30:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x1, 0x20) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) prctl$PR_SET_FP_MODE(0x2d, 0x2) [ 338.194497][T10390] BPF:[1] ARRAY (anon) [ 338.225806][T10390] BPF:type_id=5 index_type_id=1 nr_elems=0 [ 338.304635][T10390] BPF: [ 338.328625][T10390] BPF:Loop detected [ 338.332503][T10390] BPF: [ 338.332503][T10390] 06:30:26 executing program 1: clock_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xae759, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7bc, 0x3000}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x59, 0xfffffffffffff801, 0x100000000, 0x4, 0x4, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x600, 0x8008, 0xa, 0x7, 0x400}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x0, 0x6, 0x5, 0xd064}, &(0x7f0000000800)=0x98) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000030c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000003080)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@empty, @in6=@loopback, 0x4e23, 0x80000001, 0x4e20, 0x10000, 0xa, 0x0, 0xa0, 0xed, r8, r9}, {0x0, 0x4, 0x2, 0x0, 0x1000, 0x4, 0x1, 0x2}, {0x9, 0x0, 0x5, 0x6}, 0x3, 0x6e6bb1, 0x3, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x4d3, 0xff}, 0xa, @in6=@ipv4={[], [], @multicast1}, 0x3501, 0x1, 0x3, 0x0, 0x1, 0x1, 0xce5c}}, 0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r9) r10 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = socket(0x0, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000280)=0x8001, 0x4) r12 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$TUNSETGROUP(r10, 0x400454ce, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000400)={0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000440)={r13, 0x6}) sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffff67, 0x240, 0x0, 0xfffffffffffffe90) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:30:26 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) bind(r1, &(0x7f00000028c0)=@sco={0x1f, @none}, 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@dots='dots'}]}) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r6, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f00000018c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r7, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f00000018c0)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003940)='/dev/nvram\x00', 0x2000, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000003980)) ioctl$KIOCSOUND(r3, 0x4b2f, 0x5) r9 = open(&(0x7f00000026c0)='./bus\x00', 0x1c1042, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r10, &(0x7f0000002600)=[{&(0x7f0000000080)="e919837907dcdd80dd3390762d933dd7d21f96a1bb85ef0e735aeb43fe0da9470c277d5b450e6a95d255ddb82d4b49e9c398a64d3ff465a9a57378686c3a364bf4e24adcdbd7ba6d0bac0bd3c30a91b1d2f26b00d166c860501662d4d016ef2a21f75f5990a78a446433af002a62db03c2a6fc8561aca0c34167ced5fb05228b3f0aba549a149de3ba3ba1fcc18d60f09c060e8e1eef34d4d8df5b16449e3873f01967140922cea0ad9c931ca8a550a876ad0cc365e0ee5745c8f0edb68769c5a48f6e51ed44db66142bbde6f1e0645245de03", 0xd3}, {&(0x7f0000000200)="c54be58a594f6581290e8c4ce0e74c9f440c9c8f08cf1ce6a4ad2ad7fea60b38f273fa19b6f4331ff1358414ea38530c2cdd8db329becf9e82d4d1ff1d9f9e770b21b0796566393ee91d7257c7ff9e3132604a8835d77462a327d34d0772ca1a428086c56024de722a2f63f8b1c78f6e45e7853227d5fd8465c25e896207d310e5aeee0fc7e2e9991f7a76a37d6ba7b60586fe00854cd870c93acfc6a153d710fbb142ae13f733fd1585b9757c5159e91031c410ada18ed8faeb8ea33d14b674da3b2f87ec28fbd7ab384b6ea1eacf8f8ed26abbed766a4d92dc077b8e9d45d19a631a2e79dd9f15276f2421d450ae64134b1d16", 0xf4}, {&(0x7f0000000340)="2b598c2ead2343f92ea81ad30524aaa2e956dab9f56fbfddee7740a53aca3af124fd803795995538b196d029e3a2729ea897a42af3974e6f6ea45228ab4ac56babcec47a5c8aea1f42c9c60cdcd143602ca47de08de58b53e7562d795a427fc70210adf81b6fd65d7378676a308e6420532b74df2188e7910db028f99de01384ec455a0bd04ec2bfd77656e65d69af479b574f", 0x93}, {&(0x7f0000000180)="6ae3", 0x2}, {&(0x7f0000000400)="e17f86f5762671f2990d4538f097c478e1e943835a81b7d6614c21e76141a5cd071f6640427de6d91e60c2bc46be92b5a53d7919dcc523efced97f18eb70e2e5e73b5bb0328d887e2ab66f725098f0dfe8cc90bd8d5a77b3d367d51e45cf16ff96ca2ea3407b18e91521a636fc4e2855b3ececac4fb5b69896e902bd58961162567502e63703d9f3e0c7838eae12c3502000500ed92a97ee9a9faaa3770752436cbcff4b18ee510d5137b6fc2f5dc6e91a1999014dd4717353e9ad782efba8ddf1c9", 0xc2}, {&(0x7f0000000500)="c57fe95be4bd767f19333bb8d2aaa701f1119cf9d802bc75a17f15f67300aa4ac400564c", 0x24}, {&(0x7f0000000540)="208380aa42b09214337522c96ef509a2cfecb403090f1b394ec96f294ff980a1e1eed2403c46e5bf335f43e349610ce36923f70f0117c1b7e5fda98a2468bfec02a4c22b93684445b26dac4ad1d027522b8ca618e7cc13769e4187827830e05329d11ed1f5af1e44495208ff21a7221629551fefdf6d19682e5794467a75baac2e418158aea9c162a05601d25e917300200d80", 0x93}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}], 0x9, 0x8) fallocate(r9, 0x20, 0x0, 0x10000) fsmount(r9, 0x0, 0x0) [ 338.407495][ T27] audit: type=1800 audit(1582871426.780:31): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16559 res=0 06:30:26 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x3, 0x4, 0x1ff}) 06:30:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0xec1b66960107710) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000002c0)="878762f05c9caaa23813df3523bf353d", 0x10) getpeername(r1, &(0x7f0000000100), &(0x7f0000000180)=0x80) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6800e9ffe6284fab1781ea7be12ced0b5ee5261bed4c2c25fae12d9ff5b57caaa72c7208651f", @ANYRES16=r4, @ANYBLOB="95c40000000000000000010000000000000008410000004c001800000000696200"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x2, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x14, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x21, 0x0, @rand_addr=0x3, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x71, 0x1, 0xe, [{@remote, 0x3240}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x1}, {@multicast2, 0xc92}, {@multicast1, 0x80000001}, {@loopback, 0x7561}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x3}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "657713", 0x2, "d0b778"}}}}}}, 0x0) 06:30:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}}, 0x8000) [ 338.659465][T10433] FAT-fs (loop3): bogus number of reserved sectors [ 338.676839][T10433] FAT-fs (loop3): This looks like a DOS 1.x volume; assuming default BPB values 06:30:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000d43b68ea854717fc2ff33c100001080000ffff000000000001e800", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000008d0000000000000081b9ed9bfbd0c584915277069175563e7b0714416c5e5b2b39762ef4701c95bb809edbc9f5507316f0e3f56394f5e2dbc2d299ca72be837c58ba1c8c4f29b8a253a11da3df6dfa16a8ad7a89f499b28708c45757cfad18a701a12283b5872a21f76b87f16c7e5940000000a101708f88d033a5f9aaa9b10883eaaa8c756d4fd7a301cb7db10237c0428164f540101a6ca2f4195e3b7cf85ac4f5eba5492be3513e3e0ae4149c008d1c9fb223cce54dc8fd1e37b6fa705d47c6a19902507bcbed30"], 0x28}}, 0x0) 06:30:27 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) socket(0x200000000000011, 0x3, 0x0) socket(0x840000000002, 0x3, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0x59, 0xfff, 0x9}) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x7}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}}, 0x0) 06:30:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100627269646765000014000200080005000100000008000100e4990000"], 0x44}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x2f, &(0x7f0000000100)}], 0x492492492492642, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="49876e0d321e87e6b62b0eab960a8114aeb7467f6d13fc23", 0x18) 06:30:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="af9a974cb7e1"}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r5, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f00000018c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r6, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f00000018c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r7, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f00000018c0)) r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x400000, 0x1c0) ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f00000000c0)) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010800"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000300016802c0001602800019c00000000aaaaaaaa8abb000000000000000000000000000000000000000000000200000000000009dad953c7261d3bfc9d91187cd9cd4bc5c2c2c0f26ef102964c4ab073606ebbd7f956b0717989d83dbb384475970eaed6b8541e6f087c5332740fdf7f277764eaef101c2e07dc373baf159c3fa636ef5f0d959824fca386e763556f9310e2b7a13cfac3fffdd596ad3e"], 0x54}}, 0x0) 06:30:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x3a080, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000400)) io_setup(0x83, &(0x7f00000003c0)) io_setup(0x400, &(0x7f0000000040)) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1c, &(0x7f0000000200)=0x0) fcntl$setstatus(r3, 0x4, 0x4800) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_submit(r4, 0xaa, &(0x7f0000000540)) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x3, 0x210000) write$P9_RLINK(r5, &(0x7f0000000440)={0x7, 0x47, 0x2}, 0x7) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000340)={0x0, 0x3, 0xfffffffffffffed7, &(0x7f0000000300)=0x7ff}) io_submit(0x0, 0x0, 0x0) [ 339.265438][T10474] __nla_validate_parse: 132 callbacks suppressed [ 339.265449][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.421283][T10480] [ 339.423658][T10480] ================================================ [ 339.430167][T10480] WARNING: lock held when returning to user space! [ 339.436676][T10480] 5.6.0-rc2-next-20200224-syzkaller #0 Not tainted [ 339.443181][T10480] ------------------------------------------------ [ 339.449690][T10480] syz-executor.4/10480 is leaving the kernel with locks still held! [ 339.457672][T10480] 1 lock held by syz-executor.4/10480: [ 339.463158][T10480] #0: ffff888099e42418 (sb_writers#3){.+.+}, at: ovl_write_iter+0xcc1/0x1090 06:30:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfff, 0x10000) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) setrlimit(0x7, &(0x7f0000000040)={0x4, 0x146}) 06:30:28 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) keyctl$get_security(0x11, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0072c3827c53fc10aff1a3c9a60c25b35912696c76263adb36e5e9a7c6e80fc1a6794486e5d41d90e194d5ca61e62ab836a7a99e209c20ac990751c90f4e6b153afd611a040e847faf265f25772b9ad3823dd3d1cf8315c66e462e7c74933bfd139f45494bc157cdc6d3ce924922f30d41c8ed8e81d9da8e5be1ee8e4b0f2a1d9c27bb8dfb0e22b3a01fe355fc4e12465537616680b782822dcace593220486705b0422c3323098188f979bc85c5999814efb4b9bd6cc20cf34119adb5826d1dd7029f211bc85581c9d9800214950ea4b065f6bb64cebd8cd3819cea44adc9f64eb6c2599dd12765298c8e0f9c1acc0cf0d5c0a4318e2ff0ce63cecf3d28f948d9be46fb124de9000000008c19a7fd6d62e565b5fa135c13c11f9832250cee8affa2443173f3560d54e684ae1ce5bda98ccf1e62a7b6de0330c48de96c87cc4cdd38ae20fbfd1efc835227e0605d242612d0932ae42d484e1a0c915cb5422d617db4195e7c30337581aa627505879bcb6c93c6d6476b96cdec87ac9314847cf970836f3fbbe8129ec4b456342d92821fe3905262ebf1175a65cf859455b3af216000278a941b2aa8bc9ee4b575"], 0x1ad) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0xfffffffb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$RTC_UIE_OFF(r0, 0x7004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x721040, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r4, &(0x7f0000000100), 0x0) dup2(r3, r4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000002c0)=""/86) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', 0x0, &(0x7f0000000240)='{\x00', r5) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="1301a7118e521a227778ac79f4b8808100c745c728a4931a30e10a3bdc27af7cb7c460cc56ec7a7cebc1f0d728aad4ea", 0x30, r5) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)='{\x00', r6) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="1301a7118e521a227778ac79f4b8808100c745c728a4931a30e10a3bdc27af7cb7c460cc56ec7a7cebc1f0d728aad4ea", 0x30, r6) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$instantiate_iov(0x14, r5, &(0x7f0000000180)=[{&(0x7f0000000100)="24fd24e6992689c689bf6cf468877ec50d18e8f9a1dd0f5e43bde16351b01cd4f709b71967873d157f3eac753830e0e5", 0x30}, {&(0x7f00000003c0)="10f386561985ae230400fa3d815cf440832903265ea57dcf7cc4db3a11de218e30657564d1ef614ec673d6b6db70ae94b7ad61fc1b7855c66f231d73341a1cc3a5b724e4532cec5e3ade3f776ef62fd032f264ffbc12147efd9070ed05ccb6504db4fe17422d2851589a35e742d2df59c2fdd4e0917da4f5ba4fe7504b70851da5b3b165c1ab973e46d65d9a4025149fe87042f72a9b899e6879c1fdbca316c45f5cb102fde801f406def5502a24c984df29d64517bf7e9efd5f8a142e0e", 0xbe}], 0x2, r7) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 06:30:28 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl(r1, 0x20, &(0x7f0000000180)="6202bd7b5df364ea41c8a0aaff828fc1e4ac80e82b71b97052fb242448a9250761ff0f88cb4fd999eeaffc8462146b7848e5681b55066e984f166fd9be1860ad00adec658427ae") perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b40e006800a0093040300001af5cc6824", 0x12, 0x6}], 0x0, 0x0) [ 339.845863][T10494] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 06:30:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) 06:30:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in=@dev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3f, @remote, 0x7}}, 0x9, 0x3ff}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r3, 0x6}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c000100626f6e640000000018000200140008000f000000000000000000000000000000159c9019fe63cb4f897fd61416a722559edc01509317ed468f88b074d3a811a338afd4b78ed2ca92144c2d1b8dc767cb5f18ca1fc95294"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924924924926c0, 0x0) 06:30:28 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl(r1, 0x20, &(0x7f0000000180)="6202bd7b5df364ea41c8a0aaff828fc1e4ac80e82b71b97052fb242448a9250761ff0f88cb4fd999eeaffc8462146b7848e5681b55066e984f166fd9be1860ad00adec658427ae") perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b40e006800a0093040300001af5cc6824", 0x12, 0x6}], 0x0, 0x0) [ 340.169148][T10508] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition 06:30:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000005880)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0544ecfc8cc02c766d245400000000002c1289160e", @ANYRES16=r3, @ANYBLOB="020028bd7000ffdbdf254b0000003c00848008000200d62200002400068008000300000000000800030005000000080000000500000008000200020000000a00050028a31bcba08200000400ff00"], 0x54}, 0x1, 0x0, 0x0, 0x404c885}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000004880)) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x1, [], &(0x7f00000000c0)=0x80}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x1, 0x2, 0x80000001}) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r9, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={r8, 0x0, 0x7, 0x6, 0xfbf, 0x3ff, 0x1001, 0x1, {r12, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x6}}, 0x1ff, 0x8, 0x400, 0x7ff, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000600)={r12, 0x8, 0x3, [0x3, 0x7, 0x3]}, 0xe) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r13 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r13, 0x28, 0x0, &(0x7f00000001c0)=0xfff, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) [ 340.214083][T10508] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 340.217614][T10506] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 06:30:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000005880)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0544ecfc8cc02c766d245400000000002c1289160e", @ANYRES16=r3, @ANYBLOB="020028bd7000ffdbdf254b0000003c00848008000200d62200002400068008000300000000000800030005000000080000000500000008000200020000000a00050028a31bcba08200000400ff00"], 0x54}, 0x1, 0x0, 0x0, 0x404c885}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000004880)) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x1, [], &(0x7f00000000c0)=0x80}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x1, 0x2, 0x80000001}) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r9, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={r8, 0x0, 0x7, 0x6, 0xfbf, 0x3ff, 0x1001, 0x1, {r12, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x6}}, 0x1ff, 0x8, 0x400, 0x7ff, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000600)={r12, 0x8, 0x3, [0x3, 0x7, 0x3]}, 0xe) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r13 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r13, 0x28, 0x0, &(0x7f00000001c0)=0xfff, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 06:30:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000028c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x6, 0x7f, 0x1ff, 0xf89, 0x1, 0x7, 0x40, 0xeab, 0x4, 0x7b, 0x185, 0xda0, 0x4af, 0x8, 0x7f, 0x6, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0x7fffffff, 0x6, 0x136, 0x5, 0x2, 0x4, 0x10000, 0x6, 0x8, 0x5, 0x3f]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x6, 0x7, 0x20, 0x1000}, {0x800, 0x5, 0x87, 0x7}, {0x5, 0x81, 0x2, 0xc6fc}, {0x7fff, 0x8b, 0x3, 0xffffffff}, {0x7fff, 0xff, 0x8, 0x6}, {0xfff, 0x1, 0x2, 0x1000}, {0x6, 0x3, 0x6, 0x3}, {0x7, 0x40, 0x80, 0xffff7fff}]}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x8000000201a7f19, 0x5, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 06:30:29 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @default, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default]}) 06:30:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) 06:30:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000005880)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0544ecfc8cc02c766d245400000000002c1289160e", @ANYRES16=r3, @ANYBLOB="020028bd7000ffdbdf254b0000003c00848008000200d62200002400068008000300000000000800030005000000080000000500000008000200020000000a00050028a31bcba08200000400ff00"], 0x54}, 0x1, 0x0, 0x0, 0x404c885}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000004880)) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x1, [], &(0x7f00000000c0)=0x80}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x1, 0x2, 0x80000001}) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r9, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={r8, 0x0, 0x7, 0x6, 0xfbf, 0x3ff, 0x1001, 0x1, {r12, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x6}}, 0x1ff, 0x8, 0x400, 0x7ff, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000600)={r12, 0x8, 0x3, [0x3, 0x7, 0x3]}, 0xe) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r13 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r13, 0x28, 0x0, &(0x7f00000001c0)=0xfff, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) [ 340.904437][T10525] loop0: p1 p2 p3 p4 [ 340.904437][T10525] p2: 06:30:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000005880)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0544ecfc8cc02c766d245400000000002c1289160e", @ANYRES16=r3, @ANYBLOB="020028bd7000ffdbdf254b0000003c00848008000200d62200002400068008000300000000000800030005000000080000000500000008000200020000000a00050028a31bcba08200000400ff00"], 0x54}, 0x1, 0x0, 0x0, 0x404c885}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000004880)) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x1, [], &(0x7f00000000c0)=0x80}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x1, 0x2, 0x80000001}) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r9, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={r8, 0x0, 0x7, 0x6, 0xfbf, 0x3ff, 0x1001, 0x1, {r12, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x6}}, 0x1ff, 0x8, 0x400, 0x7ff, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000600)={r12, 0x8, 0x3, [0x3, 0x7, 0x3]}, 0xe) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r13 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r13, 0x28, 0x0, &(0x7f00000001c0)=0xfff, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 06:30:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000005880)) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0544ecfc8cc02c766d245400000000002c1289160e", @ANYRES16=r3, @ANYBLOB="020028bd7000ffdbdf254b0000003c00848008000200d62200002400068008000300000000000800030005000000080000000500000008000200020000000a00050028a31bcba08200000400ff00"], 0x54}, 0x1, 0x0, 0x0, 0x404c885}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r4, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000004880)) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x6, 0x1, [], &(0x7f00000000c0)=0x80}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x1, 0x2, 0x80000001}) r9 = socket$inet(0x2, 0x4000000805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r9, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r12}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000001c0)={r8, 0x0, 0x7, 0x6, 0xfbf, 0x3ff, 0x1001, 0x1, {r12, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x6}}, 0x1ff, 0x8, 0x400, 0x7ff, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000600)={r12, 0x8, 0x3, [0x3, 0x7, 0x3]}, 0xe) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x7892}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r13 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r13, 0x28, 0x0, &(0x7f00000001c0)=0xfff, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) [ 340.986928][T10525] loop0: partition table partially beyond EOD, truncated [ 340.994542][T10525] loop0: p1 start 10 is beyond EOD, truncated [ 341.001001][T10525] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 341.009691][T10525] loop0: p3 start 225 is beyond EOD, truncated [ 341.017295][T10525] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 341.027083][T10525] loop0: p5 start 10 is beyond EOD, truncated [ 341.040819][T10525] loop0: p6 size 1073741824 extends beyond EOD, truncated [ 341.198571][T10525] loop0: p1 p2 p3 p4 [ 341.198571][T10525] p2: [ 341.216162][T10525] loop0: partition table partially beyond EOD, truncated [ 341.227959][T10525] loop0: p1 start 10 is beyond EOD, truncated [ 341.241474][T10525] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 341.353574][T10525] loop0: p3 start 225 is beyond EOD, truncated [ 341.399694][T10525] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 341.429429][T10525] loop0: p5 start 10 is beyond EOD, truncated [ 341.446847][T10525] loop0: p6 size 1073741824 extends beyond EOD, truncated 06:30:29 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000180)={'syz0\x00', {0x5, 0x80, 0x1f, 0x81}, 0x8, [0xe2f, 0xa, 0x1f9285d9, 0x3a, 0x40, 0x0, 0xfffffff7, 0x3, 0x9, 0x8cd4, 0x7, 0x3, 0x80f, 0xffff, 0x1, 0x0, 0x335, 0x81, 0xfffffe01, 0x200, 0x1, 0x8000, 0x7, 0xc, 0x3, 0xee2, 0xae5, 0x200, 0xc6, 0x81, 0x4, 0x5, 0xef4, 0x71ad, 0x8, 0x6, 0x1f, 0x1000, 0x1, 0x401, 0x3, 0x1, 0xb149, 0x2, 0x1000, 0x10000, 0x9, 0x80000000, 0x4, 0x1ff, 0x6, 0x3, 0x19, 0x8, 0x0, 0x523, 0x137, 0x758b74, 0x9, 0x101, 0x7c, 0x400, 0x4, 0x6], [0x400, 0x1, 0x1000, 0x5, 0x39, 0x6, 0x8, 0x4, 0x2, 0x1f, 0x1, 0x9, 0x7, 0x1000, 0x3b6, 0x9, 0xa0, 0xfff, 0x7fffffff, 0x2, 0xffffffff, 0x81, 0xfffffff9, 0x200, 0x5, 0x0, 0x1, 0x10001, 0xe8b, 0x3, 0x6, 0x1ff, 0x0, 0xfffffffc, 0x2, 0x4, 0x10001, 0x3, 0x7, 0x1, 0x4, 0x8, 0x8, 0x7fff, 0xa0e9, 0x9, 0x80000001, 0x3, 0x7fffffff, 0x101, 0x4, 0x2, 0x4, 0x90d, 0x200, 0x800, 0x400, 0x6, 0x0, 0x80000000, 0xda, 0x8, 0xff, 0x1], [0x4, 0xffffff81, 0x5, 0x86, 0x4, 0x625c168, 0xa79, 0x400, 0x7fff, 0x5, 0x0, 0x9, 0x3, 0xb2, 0x84, 0x800, 0x40, 0xfff, 0x8001, 0xfffff753, 0x0, 0x1, 0x1000, 0x6, 0xffff, 0x0, 0x3ff, 0x0, 0x7, 0xd36, 0x6, 0x8, 0xff, 0x4, 0x10000, 0xc09, 0xffffffff, 0x800, 0x2133, 0x81, 0xc3f, 0xffffffff, 0x5, 0x8, 0x6, 0x5, 0x6, 0x9, 0x0, 0xfca, 0x2, 0x7, 0x3, 0x3ff, 0x8, 0x7, 0x78f7, 0x0, 0x8, 0x200, 0x3, 0x2, 0x1f, 0x5], [0x8, 0x67, 0x8000, 0x7fb5e8dd, 0x1000, 0x2, 0x8, 0x7, 0x7fff, 0x2, 0x0, 0x7, 0x3, 0x101, 0x7, 0x5, 0x8000, 0x9, 0x20, 0x0, 0x8, 0x0, 0x3, 0x9, 0x8, 0x4, 0x7, 0xdc, 0x2, 0x40, 0x7, 0x1ff, 0x9, 0x2, 0x1f, 0x3, 0x79e1, 0xf8000000, 0x80000000, 0x9, 0x7, 0x5, 0x2, 0x9, 0x31e4, 0x0, 0x4, 0x7fff, 0x3, 0x6, 0x318, 0x10001, 0x4, 0xff, 0x7fff, 0x7, 0xfffffffb, 0x3, 0x6, 0x2, 0x8000, 0x8, 0x4, 0x19]}, 0x45c) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x2, @mcast1, 0x6}, 0x40aa, [0x10001, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r4}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x5, &(0x7f0000000680)=@framed={{}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10000}, 0x10}, 0x78) 06:30:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "bb07037484d918f42dea2eba49084d74e90dcc1e"}, 0x15, 0x1) 06:30:30 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @default, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default]}) 06:30:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "bb07037484d918f42dea2eba49084d74e90dcc1e"}, 0x15, 0x1) 06:30:30 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x8f4b, @remote, 0x6}}, {{0xa, 0x4e23, 0x9, @mcast2, 0x96}}}, 0x108) [ 341.863699][T10564] loop0: p1 p2 p3 p4 [ 341.863699][T10564] p2: [ 341.880168][T10564] loop0: partition table partially beyond EOD, truncated 06:30:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "bb07037484d918f42dea2eba49084d74e90dcc1e"}, 0x15, 0x1) 06:30:30 executing program 3: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020242}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20002010}, 0x810) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{0x34}]}, 0x10) [ 341.957665][T10564] loop0: p1 start 10 is beyond EOD, truncated [ 341.983128][T10564] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 341.988932][T10570] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 342.061050][T10570] Process accounting resumed [ 342.065416][T10564] loop0: p3 start 225 is beyond EOD, truncated 06:30:30 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "bb07037484d918f42dea2eba49084d74e90dcc1e"}, 0x15, 0x1) 06:30:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "bb07037484d918f42dea2eba49084d74e90dcc1e"}, 0x15, 0x1) [ 342.104375][T10580] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 342.134075][T10564] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 342.187709][T10564] loop0: p5 start 10 is beyond EOD, truncated [ 342.232782][T10564] loop0: p6 size 1073741824 extends beyond EOD, truncated [ 342.261136][T10580] Process accounting resumed 06:30:30 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x8f4b, @remote, 0x6}}, {{0xa, 0x4e23, 0x9, @mcast2, 0x96}}}, 0x108) 06:30:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r2, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/169) mq_timedsend(r0, 0x0, 0x2000, 0x0, 0x0) 06:30:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r2 = creat(0x0, 0x0) inotify_init() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x801) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x165) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@rand_addr, @loopback}, &(0x7f0000000100)=0xc) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x27e2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff20}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 06:30:30 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @default, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default]}) 06:30:31 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000000c0)={0x400, {{0xa, 0x4e22, 0x100, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x3, @remote, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/169) [ 342.594974][T10596] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:31 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x8f4b, @remote, 0x6}}, {{0xa, 0x4e23, 0x9, @mcast2, 0x96}}}, 0x108) [ 342.819094][T10596] Process accounting resumed [ 342.824693][T10608] loop0: p1 p2 p3 p4 [ 342.824693][T10608] p2: [ 342.840345][T10608] loop0: partition table partially beyond EOD, truncated [ 342.852272][T10608] loop0: p1 start 10 is beyond EOD, truncated [ 342.863006][T10608] loop0: p2 size 1073741824 extends beyond EOD, truncated 06:30:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b10b", 0x2}], 0x1}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000), 0x4) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=""/4096}, &(0x7f0000000100)=0x78) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) [ 342.889885][T10608] loop0: p3 start 225 is beyond EOD, truncated [ 342.905078][T10608] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 342.917797][T10608] loop0: p5 start 10 is beyond EOD, truncated [ 342.924001][T10620] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:31 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000018c0)) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/169) [ 342.941381][T10608] loop0: p6 size 1073741824 extends beyond EOD, truncated [ 343.012769][T10620] Process accounting resumed 06:30:31 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x8f4b, @remote, 0x6}}, {{0xa, 0x4e23, 0x9, @mcast2, 0x96}}}, 0x108) 06:30:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r2 = creat(0x0, 0x0) inotify_init() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x801) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x165) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@rand_addr, @loopback}, &(0x7f0000000100)=0xc) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x27e2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff20}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 06:30:31 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @default, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default]}) 06:30:31 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r1, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/169) 06:30:31 executing program 3: r0 = socket$kcm(0x10, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)="12a7e37a95ea5d75dfa242c53cfab06e060a93205c", 0x15) 06:30:31 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/169) [ 343.304603][T10640] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 343.398351][T10647] loop0: p1 p2 p3 p4 [ 343.398351][T10647] p2: [ 343.413615][ T27] audit: type=1400 audit(1582871431.790:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10653 comm="syz-executor.3" [ 343.457570][T10647] loop0: partition table partially beyond EOD, truncated [ 343.483650][T10647] loop0: p1 start 10 is beyond EOD, truncated 06:30:31 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/169) 06:30:31 executing program 3: mknod$loop(&(0x7f00000001c0)='./bus\x00', 0x400002200006007, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./bus/file0\x00', 0xe1c, 0x8, &(0x7f0000000500)=[{&(0x7f0000000080)="961c09e82ad27578c2ceb4c843bcb14ae204acb9218363df02b50310e9a61b2c49f2cd3f05c528c422", 0x29, 0x101}, {&(0x7f00000000c0)="7f8de93b7d52d3423f2d753e6b551c3f950fa8ec290a9a162d2decc5ca98227ae6f662101bf1860b039d337aab7e24539fb7fae96a2112227666376c2f6c3c5bde8c353724d8b1f5bb504f67a648950250999d931cfb2c853ad07301768e5e2da684f88ca5aeeda2fcdb35e5795e842941f1778821d0e7ec0ae60ed3ea052cec0e2b4bee71e253e0dede7f3b5e8e4e5bdd78bcd6bab8b4e1a8d2e9f812d6edc6d1b44cadf7b0c93410444b3794b2b9be4e466184091c6cc0a499ee2ac5fb0b0663a5f2ee077dabd4205fccd2a284651ca4c5bd92fd", 0xd5, 0x7}, {&(0x7f0000000200)="7a7eb36ce91d4d0d86a93bf1", 0xc, 0x8}, {&(0x7f0000000240)="6190c8f6e823a1c4caffa509843f9f5a491fd4747783acec1e3074d364d4bd60b3fe4bf5c2d35cdd37e2589cd1dc37ea4af3c72917d1e8b158eee20fe45d0c498f307aa0d180dc318af8f2a5f7315e21a37fe32bc7da3c8dbc7ecd83471133ed2ded23774a62eb1e7db51c3746d66e07a2ed9a03c2a606a09a489aa29e1cc088", 0x80, 0x1000}, {&(0x7f00000002c0)="b783facd532ffd0a0a59e2de45db1a5ae71a535b41bf314d3592add24767762c50a6bd2af69850277ccaf05eca6dbd45b33ebfc383efdd7d6a507d4c83617b22d37f3851f480c135a2d94a61454af53f051bbb60a2e14d65d2e34a6fb9ebd724d15891de0be3eb81102e8e4147f5a1d0f867e140faa1616d7b", 0x79, 0x8}, {&(0x7f0000000340)="a43b1767a6eb508898d963072809617ce55a48e20b803276e4649c7234210145714697d16ce5c476a906ffbe28d0b2c1db374228fb7354f4331d9a9f8f93b76621319fc02e4011f64951fe03b08391349be199c0247b50", 0x57, 0x200}, {&(0x7f00000003c0)="86b4c2f6e8be096dbbd65ff49c352e5daa2a5aa29cf3ad9db195862dcd401ccec7355f6d373e3a6f47315c23a0bd1f9d17eafda64c77839dc205424cff57fd91c11e8682c87d1a10da6ac9d1abf95d317ca00d64728c9ba1c11a5d0c59f7f3f815273f3551e11d830162dc23fb710478fd0965b2af78aa02271a616c312d37002614eea565cfce5c911ed1bc520cccb6025094ef6d593fc9f9cc0548f9fbd649a2e160f416e8683221c79477416f89e99cf073ab1a5fa99ecefa5d6d2395c90615d3840ddd1687951cd653a4efdf", 0xce, 0x400000000000000}, {&(0x7f00000004c0)='h', 0x1, 0xf4}], 0xc818491e33bcc7ca, &(0x7f00000005c0)='\xaecpusetcgroup.N&,eth0/vmnet1\\\\\x00') [ 343.566410][T10656] Process accounting resumed [ 343.574198][T10647] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 343.605361][T10647] loop0: p3 start 225 is beyond EOD, truncated 06:30:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r2 = creat(0x0, 0x0) inotify_init() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r3, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000018c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x801) fanotify_mark(0xffffffffffffffff, 0x105, 0x101b, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x165) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@rand_addr, @loopback}, &(0x7f0000000100)=0xc) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x27e2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff20}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 06:30:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) [ 343.627527][T10647] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 343.645119][T10647] loop0: p5 start 10 is beyond EOD, truncated [ 343.664740][T10647] loop0: p6 size 1073741824 extends beyond EOD, truncated 06:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0x0, 0xffe2}, {0xa, 0x8}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:32 executing program 1: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) [ 343.851923][T10671] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:32 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) 06:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0x0, 0xffe2}, {0xa, 0x8}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:32 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000018c0)) 06:30:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) [ 344.081885][T10671] Process accounting resumed 06:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0x0, 0xffe2}, {0xa, 0x8}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:32 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) [ 344.203951][T10696] loop0: p1 p2 p3 p4 [ 344.203951][T10696] p2: [ 344.329787][T10696] loop0: partition table partially beyond EOD, truncated [ 344.347748][T10696] loop0: p1 start 10 is beyond EOD, truncated [ 344.356241][T10696] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 344.364070][T10704] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xc}, {0x0, 0xffe2}, {0xa, 0x8}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:32 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) [ 344.391771][T10696] loop0: p3 start 225 is beyond EOD, truncated [ 344.415704][T10696] loop0: p4 size 3657465856 extends beyond EOD, truncated 06:30:32 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) 06:30:32 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) [ 344.458652][T10704] Process accounting resumed [ 344.491300][T10696] loop0: p5 start 10 is beyond EOD, truncated [ 344.517493][T10696] loop0: p6 size 1073741824 extends beyond EOD, truncated 06:30:32 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 06:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) [ 344.627060][T10719] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 344.727335][T10721] EXT4-fs (sda1): Unrecognized mount option " [ 344.727335][T10721] " or missing value 06:30:33 executing program 1 (fault-call:0 fault-nth:0): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) [ 344.870695][T10719] Process accounting resumed 06:30:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:33 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) 06:30:33 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 345.039133][T10747] loop0: p1 p2 p3 p4 [ 345.039133][T10747] p2: [ 345.052380][T10747] loop0: partition table partially beyond EOD, truncated [ 345.060831][T10746] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 345.070252][T10747] loop0: p1 start 10 is beyond EOD, truncated [ 345.077961][T10747] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 345.082395][T10754] FAULT_INJECTION: forcing a failure. [ 345.082395][T10754] name failslab, interval 1, probability 0, space 0, times 1 [ 345.085880][T10747] loop0: p3 start 225 is beyond EOD, truncated [ 345.105376][T10747] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 345.114125][T10747] loop0: p5 start 10 is beyond EOD, truncated [ 345.120801][T10747] loop0: p6 size 1073741824 extends beyond EOD, truncated [ 345.143009][T10733] Process accounting resumed [ 345.218763][T10754] CPU: 0 PID: 10754 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 345.228717][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.238897][T10754] Call Trace: [ 345.242311][T10754] dump_stack+0x197/0x210 [ 345.246747][T10754] should_fail.cold+0x5/0xf [ 345.251280][T10754] ? setup_fault_attr+0x1f0/0x1f0 [ 345.256410][T10754] ? lock_acquire+0x190/0x410 [ 345.261191][T10754] ? ___might_sleep+0x163/0x2c0 [ 345.266174][T10754] __should_failslab+0xb7/0x100 [ 345.271136][T10754] should_failslab+0x9/0x14 [ 345.275912][T10754] kmem_cache_alloc+0x2aa/0x710 [ 345.280807][T10754] ? __might_sleep+0x95/0x190 [ 345.285594][T10754] ? is_bpf_image_address+0x1da/0x290 [ 345.291103][T10754] __anon_vma_prepare+0x62/0x3c0 [ 345.296195][T10754] ? kernel_text_address+0xe9/0x110 [ 345.301436][T10754] do_huge_pmd_anonymous_page+0x1366/0x1a90 [ 345.307572][T10754] ? profile_setup.cold+0xbb/0xbb [ 345.312676][T10754] ? arch_stack_walk+0x97/0xf0 [ 345.317492][T10754] ? prep_transhuge_page+0xa0/0xa0 [ 345.322630][T10754] ? pmd_val+0x100/0x100 [ 345.326944][T10754] __handle_mm_fault+0x3421/0x3c20 [ 345.332104][T10754] ? apply_to_existing_page_range+0x50/0x50 [ 345.338035][T10754] ? handle_mm_fault+0x292/0xa50 [ 345.343006][T10754] ? __kasan_check_read+0x11/0x20 [ 345.348262][T10754] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.354627][T10754] ? __this_cpu_preempt_check+0x35/0x190 [ 345.360331][T10754] ? trace_hardirqs_on+0x67/0x240 [ 345.365386][T10754] handle_mm_fault+0x3b2/0xa50 [ 345.370365][T10754] do_page_fault+0x545/0x12e1 [ 345.375119][T10754] page_fault+0x39/0x40 [ 345.379316][T10754] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 345.385916][T10754] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 345.405529][T10754] RSP: 0018:ffffc900019f7d28 EFLAGS: 00010202 [ 345.411604][T10754] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 345.419587][T10754] RDX: 0000000000000078 RSI: ffffc900019f7e00 RDI: 0000000020000000 [ 345.427569][T10754] RBP: ffffc900019f7d60 R08: 1ffff9200033efc0 R09: fffff5200033efcf [ 345.435549][T10754] R10: fffff5200033efce R11: ffffc900019f7e77 R12: 0000000020000000 [ 345.443527][T10754] R13: ffffc900019f7e00 R14: 0000000020000078 R15: 00007ffffffff000 [ 345.451538][T10754] ? _copy_to_user+0x146/0x160 [ 345.456416][T10754] copy_msqid_to_user.constprop.0+0x23/0x30 [ 345.462343][T10754] ksys_msgctl.constprop.0+0x1c4/0x330 [ 345.467826][T10754] ? compat_ksys_msgctl+0x430/0x430 [ 345.473044][T10754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.479311][T10754] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.485636][T10754] ? switch_fpu_return+0x1f9/0x4f0 [ 345.490768][T10754] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 345.496849][T10754] __x64_sys_msgctl+0x73/0xb0 [ 345.501556][T10754] do_syscall_64+0xfa/0x790 [ 345.506096][T10754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.511982][T10754] RIP: 0033:0x45c449 [ 345.515876][T10754] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.535484][T10754] RSP: 002b:00007f9c22245c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 345.543907][T10754] RAX: ffffffffffffffda RBX: 00007f9c222466d4 RCX: 000000000045c449 [ 345.551886][T10754] RDX: 0000000020000000 RSI: 000000000000000d RDI: 0000000000000000 [ 345.559950][T10754] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.567933][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 345.575911][T10754] R13: 0000000000000766 R14: 00000000004c9dd2 R15: 0000000000000000 06:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:34 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) [ 345.708156][T10746] Process accounting resumed 06:30:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:34 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:30:34 executing program 1 (fault-call:0 fault-nth:1): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) 06:30:34 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 345.883437][T10776] FAULT_INJECTION: forcing a failure. [ 345.883437][T10776] name failslab, interval 1, probability 0, space 0, times 0 06:30:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) [ 345.928126][T10778] loop0: p1 p2 p3 p4 [ 345.928126][T10778] p2: [ 345.947661][T10778] loop0: partition table partially beyond EOD, truncated [ 345.954859][T10776] CPU: 1 PID: 10776 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 345.964769][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.974836][T10776] Call Trace: [ 345.978145][T10776] dump_stack+0x197/0x210 [ 345.982492][T10776] should_fail.cold+0x5/0xf [ 345.987027][T10776] ? setup_fault_attr+0x1f0/0x1f0 [ 345.992073][T10776] ? lock_acquire+0x190/0x410 [ 345.996769][T10776] ? ___might_sleep+0x163/0x2c0 [ 345.999912][T10778] loop0: p1 start 10 is beyond EOD, truncated [ 346.001628][T10776] __should_failslab+0xb7/0x100 [ 346.001648][T10776] should_failslab+0x9/0x14 [ 346.017085][T10776] kmem_cache_alloc+0x2aa/0x710 [ 346.021955][T10776] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 346.027688][T10776] ? anon_vma_compatible+0x70/0x2d0 [ 346.032922][T10776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.039190][T10776] __anon_vma_prepare+0x1b1/0x3c0 [ 346.044332][T10776] ? kernel_text_address+0xe9/0x110 [ 346.049552][T10776] do_huge_pmd_anonymous_page+0x1366/0x1a90 [ 346.055455][T10776] ? profile_setup.cold+0xbb/0xbb [ 346.060483][T10776] ? arch_stack_walk+0x97/0xf0 [ 346.065262][T10776] ? prep_transhuge_page+0xa0/0xa0 [ 346.070741][T10776] ? pmd_val+0x100/0x100 [ 346.075010][T10776] __handle_mm_fault+0x3421/0x3c20 [ 346.076222][T10764] Process accounting resumed [ 346.080136][T10776] ? apply_to_existing_page_range+0x50/0x50 [ 346.080149][T10776] ? handle_mm_fault+0x292/0xa50 [ 346.080164][T10776] ? __kasan_check_read+0x11/0x20 [ 346.080187][T10776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.080202][T10776] ? __this_cpu_preempt_check+0x35/0x190 [ 346.080219][T10776] ? trace_hardirqs_on+0x67/0x240 [ 346.080238][T10776] handle_mm_fault+0x3b2/0xa50 [ 346.122282][T10776] do_page_fault+0x545/0x12e1 [ 346.126977][T10776] page_fault+0x39/0x40 [ 346.131152][T10776] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 346.132192][T10778] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 346.137739][T10776] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 346.137747][T10776] RSP: 0018:ffffc900016d7d28 EFLAGS: 00010202 [ 346.137757][T10776] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 346.137764][T10776] RDX: 0000000000000078 RSI: ffffc900016d7e00 RDI: 0000000020000000 [ 346.137772][T10776] RBP: ffffc900016d7d60 R08: 1ffff920002dafc0 R09: fffff520002dafcf [ 346.137779][T10776] R10: fffff520002dafce R11: ffffc900016d7e77 R12: 0000000020000000 [ 346.137787][T10776] R13: ffffc900016d7e00 R14: 0000000020000078 R15: 00007ffffffff000 [ 346.137819][T10776] ? _copy_to_user+0x146/0x160 [ 346.137840][T10776] copy_msqid_to_user.constprop.0+0x23/0x30 [ 346.137861][T10776] ksys_msgctl.constprop.0+0x1c4/0x330 [ 346.226906][T10776] ? compat_ksys_msgctl+0x430/0x430 [ 346.232114][T10776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.238366][T10776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.244653][T10776] ? switch_fpu_return+0x1f9/0x4f0 [ 346.249782][T10776] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.255865][T10776] __x64_sys_msgctl+0x73/0xb0 [ 346.260551][T10776] do_syscall_64+0xfa/0x790 [ 346.265070][T10776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.270982][T10776] RIP: 0033:0x45c449 [ 346.274880][T10776] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.294491][T10776] RSP: 002b:00007f9c22245c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 346.302918][T10776] RAX: ffffffffffffffda RBX: 00007f9c222466d4 RCX: 000000000045c449 [ 346.310898][T10776] RDX: 0000000020000000 RSI: 000000000000000d RDI: 0000000000000000 [ 346.318887][T10776] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 06:30:34 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$P9_RLERROR(r0, &(0x7f0000000400)={0xa, 0x7, 0x1000, {0x1, '-'}}, 0xa) [ 346.326889][T10776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 346.334875][T10776] R13: 0000000000000766 R14: 00000000004c9dd2 R15: 0000000000000001 [ 346.346538][T10778] loop0: p3 start 225 is beyond EOD, truncated 06:30:34 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:34 executing program 1 (fault-call:0 fault-nth:2): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) [ 346.374486][T10778] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 346.466127][T10801] FAULT_INJECTION: forcing a failure. [ 346.466127][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 346.484278][T10778] loop0: p5 start 10 is beyond EOD, truncated [ 346.496852][T10781] Process accounting resumed [ 346.497149][T10778] loop0: p6 size 1073741824 extends beyond EOD, truncated [ 346.551344][T10801] CPU: 1 PID: 10801 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 346.561280][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.571341][T10801] Call Trace: [ 346.575071][T10801] dump_stack+0x197/0x210 [ 346.579421][T10801] should_fail.cold+0x5/0xf [ 346.583937][T10801] ? setup_fault_attr+0x1f0/0x1f0 [ 346.588971][T10801] ? lock_acquire+0x190/0x410 [ 346.593657][T10801] ? ___might_sleep+0x163/0x2c0 06:30:34 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 346.598519][T10801] __should_failslab+0xb7/0x100 [ 346.603373][T10801] should_failslab+0x9/0x14 [ 346.607884][T10801] kmem_cache_alloc+0x2aa/0x710 [ 346.612745][T10801] ? __kasan_check_write+0x14/0x20 [ 346.617862][T10801] ? up_write+0x150/0x490 [ 346.622197][T10801] ? do_raw_spin_unlock+0x181/0x270 [ 346.627474][T10801] __khugepaged_enter+0x3b/0x3a0 [ 346.632432][T10801] do_huge_pmd_anonymous_page+0x12d6/0x1a90 [ 346.638328][T10801] ? profile_setup.cold+0xbb/0xbb [ 346.643358][T10801] ? arch_stack_walk+0x97/0xf0 [ 346.648134][T10801] ? prep_transhuge_page+0xa0/0xa0 [ 346.653254][T10801] ? pmd_val+0x100/0x100 [ 346.657511][T10801] __handle_mm_fault+0x3421/0x3c20 [ 346.662636][T10801] ? apply_to_existing_page_range+0x50/0x50 [ 346.668539][T10801] ? handle_mm_fault+0x292/0xa50 [ 346.673487][T10801] ? __kasan_check_read+0x11/0x20 [ 346.678537][T10801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.684796][T10801] ? __this_cpu_preempt_check+0x35/0x190 [ 346.690443][T10801] ? trace_hardirqs_on+0x67/0x240 [ 346.695474][T10801] handle_mm_fault+0x3b2/0xa50 [ 346.700257][T10801] do_page_fault+0x545/0x12e1 [ 346.704960][T10801] page_fault+0x39/0x40 [ 346.709134][T10801] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 346.715731][T10801] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 346.735350][T10801] RSP: 0018:ffffc90001a77d28 EFLAGS: 00010202 [ 346.741429][T10801] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 346.749412][T10801] RDX: 0000000000000078 RSI: ffffc90001a77e00 RDI: 0000000020000000 [ 346.757398][T10801] RBP: ffffc90001a77d60 R08: 1ffff9200034efc0 R09: fffff5200034efcf [ 346.765389][T10801] R10: fffff5200034efce R11: ffffc90001a77e77 R12: 0000000020000000 [ 346.773633][T10801] R13: ffffc90001a77e00 R14: 0000000020000078 R15: 00007ffffffff000 [ 346.781654][T10801] ? _copy_to_user+0x146/0x160 [ 346.786456][T10801] copy_msqid_to_user.constprop.0+0x23/0x30 [ 346.792387][T10801] ksys_msgctl.constprop.0+0x1c4/0x330 [ 346.797886][T10801] ? compat_ksys_msgctl+0x430/0x430 [ 346.803131][T10801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.809431][T10801] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.815739][T10801] ? switch_fpu_return+0x1f9/0x4f0 [ 346.820901][T10801] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 346.827014][T10801] __x64_sys_msgctl+0x73/0xb0 [ 346.831757][T10801] do_syscall_64+0xfa/0x790 [ 346.836321][T10801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.842243][T10801] RIP: 0033:0x45c449 [ 346.846169][T10801] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.866090][T10801] RSP: 002b:00007f9c22245c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 346.874639][T10801] RAX: ffffffffffffffda RBX: 00007f9c222466d4 RCX: 000000000045c449 [ 346.882633][T10801] RDX: 0000000020000000 RSI: 000000000000000d RDI: 0000000000000000 [ 346.890625][T10801] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.898616][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 346.906611][T10801] R13: 0000000000000766 R14: 00000000004c9dd2 R15: 0000000000000002 06:30:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) 06:30:35 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) [ 346.943274][T10797] Process accounting resumed 06:30:35 executing program 1 (fault-call:0 fault-nth:3): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) 06:30:35 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:30:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) [ 347.101590][T10814] EXT4-fs: 3 callbacks suppressed [ 347.101604][T10814] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 347.146810][T10815] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) [ 347.260534][T10814] Process accounting resumed [ 347.273472][T10830] FAULT_INJECTION: forcing a failure. [ 347.273472][T10830] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 347.297491][T10830] CPU: 1 PID: 10830 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 347.307421][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.317487][T10830] Call Trace: [ 347.320789][T10830] dump_stack+0x197/0x210 [ 347.325132][T10830] should_fail.cold+0x5/0xf [ 347.329645][T10830] ? setup_fault_attr+0x1f0/0x1f0 [ 347.334754][T10830] ? fs_reclaim_release+0xf/0x30 [ 347.339709][T10830] ? __kasan_check_read+0x11/0x20 [ 347.344762][T10830] should_fail_alloc_page+0x50/0x60 [ 347.349964][T10830] __alloc_pages_nodemask+0x1a1/0x910 [ 347.355347][T10830] ? __kasan_check_read+0x11/0x20 [ 347.360378][T10830] ? __alloc_pages_slowpath+0x2900/0x2900 [ 347.366102][T10830] ? lock_downgrade+0x920/0x920 [ 347.370962][T10830] ? __khugepaged_enter+0xe5/0x3a0 [ 347.376202][T10830] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 347.382451][T10830] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 347.388698][T10830] alloc_pages_vma+0x3ce/0x620 [ 347.393478][T10830] do_huge_pmd_anonymous_page+0x48a/0x1a90 [ 347.399396][T10830] ? profile_setup.cold+0xbb/0xbb [ 347.404432][T10830] ? arch_stack_walk+0x97/0xf0 [ 347.409214][T10830] ? prep_transhuge_page+0xa0/0xa0 [ 347.414332][T10830] ? pmd_val+0x100/0x100 [ 347.418586][T10830] __handle_mm_fault+0x3421/0x3c20 [ 347.423716][T10830] ? apply_to_existing_page_range+0x50/0x50 [ 347.429630][T10830] ? handle_mm_fault+0x292/0xa50 [ 347.434584][T10830] ? __kasan_check_read+0x11/0x20 [ 347.439634][T10830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 347.445962][T10830] ? __this_cpu_preempt_check+0x35/0x190 [ 347.451611][T10830] ? trace_hardirqs_on+0x67/0x240 [ 347.456656][T10830] handle_mm_fault+0x3b2/0xa50 [ 347.461446][T10830] do_page_fault+0x545/0x12e1 [ 347.466141][T10830] page_fault+0x39/0x40 [ 347.470306][T10830] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 347.476930][T10830] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 347.496542][T10830] RSP: 0018:ffffc90001e2fd28 EFLAGS: 00010202 [ 347.502618][T10830] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 347.510607][T10830] RDX: 0000000000000078 RSI: ffffc90001e2fe00 RDI: 0000000020000000 [ 347.518590][T10830] RBP: ffffc90001e2fd60 R08: 1ffff920003c5fc0 R09: fffff520003c5fcf [ 347.526575][T10830] R10: fffff520003c5fce R11: ffffc90001e2fe77 R12: 0000000020000000 [ 347.534561][T10830] R13: ffffc90001e2fe00 R14: 0000000020000078 R15: 00007ffffffff000 [ 347.542576][T10830] ? _copy_to_user+0x146/0x160 [ 347.547361][T10830] copy_msqid_to_user.constprop.0+0x23/0x30 [ 347.553284][T10830] ksys_msgctl.constprop.0+0x1c4/0x330 [ 347.558772][T10830] ? compat_ksys_msgctl+0x430/0x430 [ 347.563989][T10830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.570262][T10830] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 347.576544][T10830] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 347.582643][T10830] __x64_sys_msgctl+0x73/0xb0 [ 347.587346][T10830] do_syscall_64+0xfa/0x790 [ 347.591872][T10830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.597782][T10830] RIP: 0033:0x45c449 [ 347.601689][T10830] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.621327][T10830] RSP: 002b:00007f9c22245c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 347.629756][T10830] RAX: ffffffffffffffda RBX: 00007f9c222466d4 RCX: 000000000045c449 [ 347.637742][T10830] RDX: 0000000020000000 RSI: 000000000000000d RDI: 0000000000000000 [ 347.645721][T10830] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.653689][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 06:30:36 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 347.661664][T10830] R13: 0000000000000766 R14: 00000000004c9dd2 R15: 0000000000000003 06:30:36 executing program 1 (fault-call:0 fault-nth:4): msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) [ 347.768261][T10828] loop0: p1 p2 p3 p4 [ 347.768261][T10828] p2: [ 347.776203][T10828] loop0: partition table partially beyond EOD, truncated 06:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 06:30:36 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 347.816104][T10815] Process accounting resumed [ 347.898010][T10840] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 347.961060][T10848] FAULT_INJECTION: forcing a failure. [ 347.961060][T10848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.980747][T10828] loop0: p1 start 10 is beyond EOD, truncated [ 347.986922][T10828] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 348.011823][T10854] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 348.096655][T10848] CPU: 0 PID: 10848 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 348.106607][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.110238][T10854] Process accounting resumed [ 348.116953][T10848] Call Trace: [ 348.116983][T10848] dump_stack+0x197/0x210 [ 348.117005][T10848] should_fail.cold+0x5/0xf [ 348.117024][T10848] ? setup_fault_attr+0x1f0/0x1f0 [ 348.117049][T10848] ? ___might_sleep+0x163/0x2c0 [ 348.143610][T10848] should_fail_alloc_page+0x50/0x60 [ 348.148832][T10848] __alloc_pages_nodemask+0x1a1/0x910 [ 348.154228][T10848] ? lock_downgrade+0x920/0x920 [ 348.159099][T10848] ? __alloc_pages_slowpath+0x2900/0x2900 [ 348.164860][T10848] ? lock_downgrade+0x920/0x920 [ 348.169739][T10848] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.176017][T10848] alloc_pages_current+0x107/0x210 [ 348.181171][T10848] pte_alloc_one+0x1b/0x1a0 [ 348.185703][T10848] do_huge_pmd_anonymous_page+0x665/0x1a90 [ 348.191544][T10848] ? profile_setup.cold+0xbb/0xbb [ 348.196589][T10848] ? arch_stack_walk+0x97/0xf0 [ 348.201383][T10848] ? prep_transhuge_page+0xa0/0xa0 [ 348.206520][T10848] __handle_mm_fault+0x3421/0x3c20 [ 348.211657][T10848] ? apply_to_existing_page_range+0x50/0x50 [ 348.217571][T10848] ? handle_mm_fault+0x292/0xa50 [ 348.219009][T10863] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 348.222532][T10848] ? __kasan_check_read+0x11/0x20 [ 348.222560][T10848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.222576][T10848] ? __this_cpu_preempt_check+0x35/0x190 [ 348.222602][T10848] ? trace_hardirqs_on+0x67/0x240 [ 348.252797][T10848] handle_mm_fault+0x3b2/0xa50 [ 348.257586][T10848] do_page_fault+0x545/0x12e1 [ 348.262290][T10848] page_fault+0x39/0x40 [ 348.266449][T10848] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 348.273038][T10848] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 348.292650][T10848] RSP: 0018:ffffc90001f67d28 EFLAGS: 00010202 [ 348.298734][T10848] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 348.306724][T10848] RDX: 0000000000000078 RSI: ffffc90001f67e00 RDI: 0000000020000000 [ 348.314725][T10848] RBP: ffffc90001f67d60 R08: 1ffff920003ecfc0 R09: fffff520003ecfcf [ 348.322718][T10848] R10: fffff520003ecfce R11: ffffc90001f67e77 R12: 0000000020000000 [ 348.330699][T10848] R13: ffffc90001f67e00 R14: 0000000020000078 R15: 00007ffffffff000 [ 348.338741][T10848] ? _copy_to_user+0x146/0x160 [ 348.343546][T10848] copy_msqid_to_user.constprop.0+0x23/0x30 [ 348.349465][T10848] ksys_msgctl.constprop.0+0x1c4/0x330 [ 348.354949][T10848] ? compat_ksys_msgctl+0x430/0x430 [ 348.360168][T10848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.366435][T10848] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.372725][T10848] ? switch_fpu_return+0x1f9/0x4f0 [ 348.377866][T10848] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 348.383965][T10848] __x64_sys_msgctl+0x73/0xb0 [ 348.388684][T10848] do_syscall_64+0xfa/0x790 [ 348.393230][T10848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.399153][T10848] RIP: 0033:0x45c449 [ 348.403063][T10848] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.422686][T10848] RSP: 002b:00007f9c22245c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 348.431119][T10848] RAX: ffffffffffffffda RBX: 00007f9c222466d4 RCX: 000000000045c449 [ 348.439119][T10848] RDX: 0000000020000000 RSI: 000000000000000d RDI: 0000000000000000 06:30:36 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) 06:30:36 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x10540) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 348.447131][T10848] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.455227][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 348.463257][T10848] R13: 0000000000000766 R14: 00000000004c9dd2 R15: 0000000000000004 [ 348.487703][T10828] loop0: p3 start 225 is beyond EOD, truncated [ 348.497517][T10828] loop0: p4 size 3657465856 extends beyond EOD, truncated [ 348.534656][T10828] loop0: p5 start 10 is beyond EOD, truncated 06:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 348.547926][T10828] loop0: p6 size 1073741824 extends beyond EOD, truncated 06:30:37 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) 06:30:37 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="020181ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa6000000e10000008877007200300700bfffffff00000000008000da55aa", 0x40, 0x1c0}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) [ 348.650687][T10870] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, 06:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 348.782516][T10870] Process accounting resumed 06:30:37 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) 06:30:37 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/169) 06:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 348.955868][T10885] loop0: p1 p2 p3 p4 [ 348.955868][T10885] p2: [ 348.976447][T10885] loop0: partition table partially beyond EOD, truncated [ 348.991936][T10885] loop0: p1 start 10 is beyond EOD, truncated 06:30:37 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0x2, &(0x7f0000000000)=""/169) 06:30:37 executing program 2: creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) [ 349.006083][T10885] loop0: p2 size 1073741824 extends beyond EOD, truncated [ 349.024160][T10885] loop0: p3 start 225 is beyond EOD, truncated [ 349.039521][T10885] loop0: p4 size 3657465856 extends beyond EOD, truncated 06:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 06:30:37 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0x3, &(0x7f0000000000)=""/169) [ 349.084170][T10898] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000500, [ 349.098307][T10885] loop0: p5 start 10 is beyond EOD, truncated [ 349.108097][T10885] loop0: p6 size 1073741824 extends beyond EOD, truncated 06:30:37 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1001004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) acct(&(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2210022, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x500}}]}) 06:30:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 349.255965][T10898] Process accounting resumed [ 349.308402][T10906] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 349.322075][T10910] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 349.348253][T10885] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 349.349624][T10913] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 06:30:37 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xb, &(0x7f0000000000)=""/169)