[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. 2020/04/28 20:28:42 fuzzer started syzkaller login: [ 64.498625][ T7127] as (7127) used greatest stack depth: 23072 bytes left 2020/04/28 20:28:44 dialing manager at 10.128.0.26:40739 2020/04/28 20:28:44 syscalls: 3000 2020/04/28 20:28:44 code coverage: enabled 2020/04/28 20:28:44 comparison tracing: enabled 2020/04/28 20:28:44 extra coverage: enabled 2020/04/28 20:28:44 setuid sandbox: enabled 2020/04/28 20:28:44 namespace sandbox: enabled 2020/04/28 20:28:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/28 20:28:44 fault injection: enabled 2020/04/28 20:28:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/28 20:28:44 net packet injection: enabled 2020/04/28 20:28:44 net device setup: enabled 2020/04/28 20:28:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/28 20:28:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/28 20:28:44 USB emulation: /dev/raw-gadget does not exist 20:31:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x604, 0x80283) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x480080, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=""/129, 0x81}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}}, 0x6, 0x0, 0x0, 0x9, 0x6}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={r2, 0x200, 0x50, 0x7, 0x577f}, &(0x7f00000003c0)=0x18) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000400)) write$P9_RWSTAT(r0, &(0x7f0000000440)={0x7, 0x7f, 0x1}, 0x7) sendto$llc(r1, &(0x7f0000000480)="e4643fd30c7096c92f4fe878e222546e344b8836bb3268f34e911ee49073cd02a02826150fde112b167693e32534e2224bf666df55981215aa416a11a496152237da2aa6821475beb1a141725308db6ff7c17d3bf1a60ec194c0bbec1d837e460550a587df739b3b510fe35d275d81ab520985e2351c4ffbc4f65aa2f33a499f7c6eb48c2889641563234f1341949e77bcd160f5c8c5323823685c133acf86507b24a8d353d302feda3c6068be19234c4418d7ea0e3857520cba679055d291ca334f7a8ffda3564665f79140c30fa22f8b656fede607b8c0ff9381058ebe323eb0bdce", 0xe3, 0x20004800, &(0x7f0000000580)={0x1a, 0x312, 0x7, 0x1, 0xbc, 0x3, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x9, 0xfa, 0xf8, 0x2, 0x3, 0x4, 0xb8, 0x38, 0x326, 0x1, 0x7, 0x20, 0x2, 0x3f, 0x0, 0x4}, [{0x3, 0xab, 0x4, 0xdc3b, 0x6, 0x4, 0x3ff, 0x40}], "1ead99972920d9748339554cc0a8f4baf6a8fc2be6c3196fbb86ebc99a79390c0b8af0a7e20e0202b3afca8f0bfdc54d6100b227a15de6e1f7e4d2549ccdc984277da25f4b81445a28eb33de4d782e29a9bd4a7481117691d2eaa8277b0377a47615a2d6e83b60421827dc8059541b6b0b278f20dcc453", [[], [], []]}, 0x3cf) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000009c0)={0x8001003, 0x1}) r3 = syz_open_dev$vcsa(&(0x7f0000000a00)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x4) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400001b) r6 = accept4$inet6(r3, 0x0, &(0x7f0000000c80), 0x0) recvfrom$inet6(r6, &(0x7f0000000cc0)=""/113, 0x71, 0x63, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) [ 230.259970][ T7137] IPVS: ftp: loaded support on port[0] = 21 20:31:29 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x86fb, 0x402443) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x4c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0xf5c6) r2 = accept4(0xffffffffffffffff, &(0x7f0000001800)=@ipx, &(0x7f0000001880)=0x80, 0x80000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4df54ee7eb45350e}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x10, 0x3f5, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair(0x6, 0x5, 0x7, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$ax25(r4, &(0x7f0000001a00)=""/101, 0x65, 0x101, &(0x7f0000001a80)={{0x3, @default, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @bcast]}, 0x48) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001b40)={0x0, @can={0x1d, 0x0}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, @rc={0x1f, @fixed={[], 0x12}, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b00)='veth0_macvtap\x00', 0x1, 0xda34, 0xf05f}) connect$can_j1939(r2, &(0x7f0000001bc0)={0x1d, r5, 0x2, {0x1, 0xfe, 0x2}}, 0x18) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000001c00)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x61f2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001c80)=""/186) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'ip6gretap0\x00', 0x800}) pkey_alloc(0x0, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000001d80)={0x3, 0x0, 0x1, 0x81}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000001dc0)={r6, 0x68e}) openat$zero(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/zero\x00', 0x2000, 0x0) [ 230.415071][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 230.509891][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.517519][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.527880][ T7137] device bridge_slave_0 entered promiscuous mode [ 230.538793][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.545952][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.557137][ T7137] device bridge_slave_1 entered promiscuous mode [ 230.584311][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.600363][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.631341][ T7137] team0: Port device team_slave_0 added [ 230.641062][ T7137] team0: Port device team_slave_1 added [ 230.666473][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.674191][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.703796][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.729667][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.729913][ T7291] IPVS: ftp: loaded support on port[0] = 21 [ 230.736655][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.768979][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 20:31:30 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe00}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40001) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x840, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000580)={0x0, 0x30, 0x3, 0x5, 0xc4, 0x5, &(0x7f0000000480)="54f88cf80928a0513be76dc6c2478465a0b0714b7633d50fe0c1fba79961d33cd59bcb3c3bed6f2298ce6fa769db0b952c60eb3d69a42f730a8ca72988ff3dedbef366326eb94b4988f15dd91a87b6dff7e1b15b0ea1cf03b14c2de614140e72dd2d697585d192bb360088a08fb7a7754c452f59bf52ecf3ad178cc9d861605cbee3132560650753b5821b6111b25c079098d8d39849b4da9cf657b3237a76bfc26724ac7d76e2efdbf133f4b7cf998823481f10a412ff48f5348b75225a6090eeb6decf"}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0xf000000, 0x0, 0x9, r1, 0x0, &(0x7f00000005c0)={0x9e0906, 0x0, [], @ptr=0x1fec8eb0}}) write$snddsp(r4, &(0x7f0000000640)="40fb0811f4f2e8e6236e7338362e9dfef03a9fc715f596476fc0bc42fe34b59e336493a21595ce88cbc5aedf4915bff698e16d7ea40d5eb7068958b5972fe6b9a6cbce28d29f136d4d583458ac73143d29acad74c402d6dd33ed45931af6ad22d1ae922f1d3f6af48e75", 0x6a) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000740)={0xa00000, 0x99, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x9a0903, 0xd781, [], @string=&(0x7f00000006c0)=0x5c}}) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3f5, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004000}, 0x24002088) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880)='/dev/hwrng\x00', 0x101101, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x1404, 0x8, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x20000010) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000009c0)=0x14) r7 = syz_open_dev$video(&(0x7f0000000a00)='/dev/video#\x00', 0x6, 0xc989df82191a5dda) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000a40)={0x2, 0x9, 0x4, 0x1, 0x80000000, {0x0, 0xea60}, {0x5, 0x3, 0x1, 0x3, 0x80, 0x8, "f5717fc9"}, 0x3, 0x3, @userptr=0x1ffc0000, 0x9}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000ac0)=0x5) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/nvram\x00', 0x208100, 0x0) ioctl$RTC_PLL_GET(r8, 0x80207011, &(0x7f0000000b40)) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) write$binfmt_misc(r9, &(0x7f0000000b80)={'syz0', "9f7451d7e32e9c99b1642fc53ba973c417f5272d3688ba207f2566ef25f37f75bd9ccae95063ae3916da9f31bbca0902d47a9eaccc363138ce8fecc22ef370b5bc63cf827575ab849cf4b22fccdbb2a2497968191ec7a40b62432784ecffeb4239d81abcf487194ecc3b1d60fff6913b4faab88cbba08890fb22f7506745b20149b2458ca76f724c7981e9eb56d0c78f256ff5a2e90a64f9233a876f820baae014b9355e7e5b795d064d59ffb6c6589abe7c8d0a3adb66dc5867bd5c4778afde9d0eb7ca0e1335a21ff48e44026797ecebf795b893ed389f48d83f915ab79f9fb810a3c4b6cb11c38bbe87e23bfa6f85db48169030461f"}, 0xfb) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) [ 230.882633][ T7137] device hsr_slave_0 entered promiscuous mode [ 230.969227][ T7137] device hsr_slave_1 entered promiscuous mode 20:31:30 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x274201) flock(r0, 0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x80, 0x20}]}, 0xc, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, 0x8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x20000, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x100, 0x70bd27, 0x25dfdbff, {0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) clock_gettime(0x2, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dri_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x40, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e21, @multicast1}, 'ipvlan1\x00'}) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/170, 0xaa}], 0x5, &(0x7f0000000800)=""/9, 0x9}, 0x5}, {{&(0x7f0000000840)=@x25={0x9, @remote}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/230, 0xe6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f0000001a40)=""/223, 0xdf}, {&(0x7f0000001b40)=""/212, 0xd4}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/64, 0x40}], 0x7, &(0x7f0000002d00)=""/236, 0xec}, 0x6}, {{&(0x7f0000002e00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000002f00)=""/233, 0xe9}, 0x8}, {{&(0x7f0000003000)=@tipc=@id, 0x80, &(0x7f0000003540)=[{&(0x7f0000003080)=""/71, 0x47}, {&(0x7f0000003100)=""/170, 0xaa}, {&(0x7f00000031c0)=""/111, 0x6f}, {&(0x7f0000003240)=""/109, 0x6d}, {&(0x7f00000032c0)=""/160, 0xa0}, {&(0x7f0000003380)=""/78, 0x4e}, {&(0x7f0000003400)=""/47, 0x2f}, {&(0x7f0000003440)=""/153, 0x99}, {&(0x7f0000003500)=""/41, 0x29}], 0x9}, 0x4}, {{&(0x7f0000003600)=@tipc, 0x80, &(0x7f0000003700)=[{&(0x7f0000003680)=""/87, 0x57}], 0x1, &(0x7f0000003740)=""/241, 0xf1}, 0x10001}, {{&(0x7f0000003840)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000038c0)=""/162, 0xa2}, {&(0x7f0000003980)=""/175, 0xaf}, {&(0x7f0000003a40)=""/150, 0x96}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/30, 0x1e}], 0x6, &(0x7f0000005bc0)=""/34, 0x22}, 0xd8f}, {{&(0x7f0000005c00)=@can, 0x80, &(0x7f0000007140)=[{&(0x7f0000005c80)=""/239, 0xef}, {&(0x7f0000005d80)=""/4096, 0x1000}, {&(0x7f0000006d80)=""/129, 0x81}, {&(0x7f0000006e40)=""/101, 0x65}, {&(0x7f0000006ec0)=""/82, 0x52}, {&(0x7f0000006f40)=""/217, 0xd9}, {&(0x7f0000007040)=""/207, 0xcf}], 0x7, &(0x7f00000071c0)=""/93, 0x5d}, 0x20000}, {{&(0x7f0000007240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000007400)=[{&(0x7f00000072c0)=""/232, 0xe8}, {&(0x7f00000073c0)=""/1, 0x1}], 0x2, &(0x7f0000007440)=""/57, 0x39}, 0x400}], 0x8, 0x40000000, &(0x7f0000007680)) finit_module(r4, &(0x7f00000076c0)='selinux\xfa\x00', 0x1) renameat2(r1, &(0x7f0000007700)='./file0/file0\x00', r1, &(0x7f0000007740)='./file0\x00', 0x2) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000007780)='/dev/cachefiles\x00', 0x1, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000007800)='/dev/vsock\x00', 0x230400, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000077c0)='lo:em0cgroup+]em1lo@em1\x00', 0x0, r6) r7 = accept4$packet(r5, &(0x7f0000007840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007880)=0x14, 0x80000) splice(r7, &(0x7f00000078c0)=0x40, 0xffffffffffffffff, &(0x7f0000007900)=0x8001, 0x400, 0xe) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007a80)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007a00)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) [ 231.152012][ T7313] IPVS: ftp: loaded support on port[0] = 21 [ 231.461728][ T7365] IPVS: ftp: loaded support on port[0] = 21 [ 231.507197][ T7291] chnl_net:caif_netlink_parms(): no params data found 20:31:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x9, 0x75}) r1 = creat(&(0x7f0000000080)='\x00', 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f00000000c0)) creat(&(0x7f0000000180)='./file0\x00', 0x9a) r2 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5, 0x40041) r3 = dup(r2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x4, 0x8, 0xffc5}) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x40, 0x1, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x1}, 0x10, 0x1, 0xae4, 0x8, 0xbbb, 0x7, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) fallocate(r4, 0x2, 0x7, 0x40) setsockopt$inet_buf(r3, 0x0, 0x9e3296fa3a09ce1e, &(0x7f00000002c0)="f11876f5ec0ab9c23ee52325eace7e10a5be7a471b40eb250b0f14d9c3a61e282636baf06666d4c28cc1c0687a16c6194f927549f56aacc32d0fa1d4d58fd46c674e4c34a9abdda51a5b81cc9c68446bb988bfab51c1573eafd0868b14db67f393b3d2c6afa6d8124423f41fc35ff1d40c64c8bb9e4de0bcbf0c762ef6f2869c9cda", 0x82) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1, 0x101) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x7, 0x4, 0x1, 0x7, 0x0, 0x7, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x2, 0x2}, 0x40200, 0x0, 0x10001, 0x7, 0x6, 0xffff8000, 0x8}, 0x0, 0x4, r5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000540)={r7, 0x54d80666ed60fb9}) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r8, 0xa6f90000) [ 231.713716][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 231.744229][ T7137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.856619][ T7137] netdevsim netdevsim0 netdevsim1: renamed from eth1 20:31:31 executing program 5: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @random}]}) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xad7e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x81, 0x2000) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0xa, 0xa, 0x149f5f2389398890, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_USERDATA={0xe1, 0xd, 0x1, 0x0, "d08aa7702657153f8d4c2d42c0d510f1a64f64b10e2b14c8da8251249b7452a8c6bdfcff44f6e3b3d7ca49b4cedeb3cdc8c743ba9e6648aacfe24f1926e44e9dc583d3350617c0515f9dca8df0e1338ebb6bb5d983e1a52f39fda661699923817f5848344cbaf9eb0c2b1f427c1606a768a1b17de17c95a43679026f6b5a5ebb64778338f5961779302990014bfd447ad47a3bed29205f98140b3edb1c9e55bc4559a6f173273bf981c9c280129842eae43e3edd194803ba583ada2270aad4147140476580c05601c9630d0c48e49e8ef07a29eb46a793b81aebae2c19"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, 0x108}, 0x1, 0x0, 0x0, 0x2040}, 0x20000040) r3 = dup(r0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4ac, 0x12, 0x20, 0x70bd28, 0x25dfdbfc, {0x1, 0x20, 0x2, 0x3, {0x4e22, 0x4e20, [0x127, 0x9, 0x6, 0x2], [0x3, 0x3ff, 0x0, 0x7fff], 0x0, [0x974, 0xc96]}, 0x1f, 0xffff745d}, [@INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "e2e53254c862449d0af815abaad045086d8523169e434db5416413c6fe05a047b3538f794132e412c9b9e15de9e560cec1fa468939348498ac3fdd114b0ec3fe2ce1838850a123abcbcda63f8d582aa71550d7cf1c02cf4d3c31eed486579e2842637fcad6688f1a4b5a4c834ba5e17e427e4188c4850594c9f71c6e1fc28684f980bd3020381411ff418080ddbbe5e683a0f22938ec2d331ae867f1d2dbc884bb4b0e3c4f03637043df8a76718f05ae1683e00dc7fed7754ad42e924ed0fb"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "b89f73ac2601392b0d9b9bacea41631dca8f0ffcec6ba1b09e6b374c7156034ce27eb9c00af35ece0d085c8c97c5d16113566aec94a988990a0bfa72d6e1788a2762ae38533b589736af9af4e9fcf2a528ff0f2bfbd9483a653bfbe1f167c945d740f417abfd36487e5de87b000e89654e5d035445"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "4ca277dc2d70ae870718993ccdb0854737"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "b3ac16cbeab962d366943f703667310e0d2858cf4391ccb04419b68abac45831529b5ef28f6d2fe3205c5bc745421cbfe0b63aa2f1829102cdea7a401332ea9b221e48251e0ecd360ed2ca4885e253d7dc5f33498ffdad001d7b307ae061b9b9e080b540f7f561fcaecc5ce19843fc27b11271db9db988d153ef616888abfc65330a7769ac5ba0f33108e4a792dea544560c76eff01daf79b047926bcd90565255d9dc26ac7f7c00248d596108306016f42222e3b3c1f0c0fdb49b74c5fd799bf2e731a077698b717484"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "2ca5bcb9d0650d009e27d0746fc5ae73b07323d04482a90bb1b769ae4916868623ce2a12112cbb0abe8c7c82cf5d8c8edbde11120b679470672c697540fd461ed5abc2c275baff6a40ecb8550f7ab5e750723b1fce4931136497a930cceca86afa0b7cbbdc74cefea51ba2e40179c7b46c1f934beeff468f2eaf6d0290b4559566efc488b27739754b5fa9996588b1a1140d4e08d0e79bd54380fbfb5049f1d3053acd398b9cd6e03e2c0ee5a51e4891f1a82fdffb5f400dcad3ac9289c0c00e65758bf84668408777d2fb0ee07e0bd85f3e7368c2cbe53334fc55cebbd0f3c69634"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "17a86e66280608d560c950b53283bdac5bd4da34ea7e9cec4719e86bcc8505261d5fc6a6e403c597df19"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "4c0f7dd3c052436833bb67819f528a0597497c3a105c6cf073b778b3ac1b38b57c946df50cf6bf3bc72e196aaa41172f6550295b1b69fd554ad0840bfddbf6fb4c3153829b"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "72684da71a8f64a632951b4aabbf40da64c02efbdf4a48937f1271274ebc84b9cf189e858ec74f260804117f08427dbaae42154a9f098ad0e0019797bfc96cdd92999c97dfeff90bb5bfa87a436e632d5ca7ba80f63c9af45327c2dd28472b4a20628d620df74513bfc4735ce22cae9a"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "411a81f03456e838928803656fcb03af6576362f748ad4464c745b48f93833f7748906a9252eb9e8d2a5ee6fbb54119cbd3d62e0e6e4d0f6bf8295c66c78362f0206598589481ba35509017b19e8808cde7b4a6416a4994210"}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x2840}, 0x4008800) delete_module(&(0x7f00000009c0)='/dev/vcs#\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000a80)=@full={0xb, @dev, @remote, 0x0, [@null, @default, @rose, @null, @null, @netrom]}, &(0x7f0000000ac0)=0x40, 0x80000) kcmp(r4, r5, 0x4, r0, r6) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000b00)) r7 = syz_open_procfs(r4, &(0x7f0000000b40)='net/ip6_flowlabel\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f0000000b80)={0x0, 0x101, 0x1, 'queue1\x00', 0x200}) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='9p\x00', 0xa7ec7ba43aa48206, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u='version=9p2000.u'}, {@version_9p2000='version=9p2000'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) [ 232.013210][ T7137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.045939][ T7137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.101685][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.109471][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.114610][ T7579] IPVS: ftp: loaded support on port[0] = 21 [ 232.117733][ T7291] device bridge_slave_0 entered promiscuous mode [ 232.134732][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.142505][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.151342][ T7291] device bridge_slave_1 entered promiscuous mode [ 232.234823][ T7613] IPVS: ftp: loaded support on port[0] = 21 [ 232.244115][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.270267][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.277343][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.286319][ T7313] device bridge_slave_0 entered promiscuous mode [ 232.297576][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.305442][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.313803][ T7313] device bridge_slave_1 entered promiscuous mode [ 232.333926][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.445898][ T7291] team0: Port device team_slave_0 added [ 232.493920][ T7365] chnl_net:caif_netlink_parms(): no params data found [ 232.510765][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.523300][ T7291] team0: Port device team_slave_1 added [ 232.557490][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.586516][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.595666][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.624221][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.670845][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.677817][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.705405][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.789838][ T7313] team0: Port device team_slave_0 added [ 232.862724][ T7291] device hsr_slave_0 entered promiscuous mode [ 232.908867][ T7291] device hsr_slave_1 entered promiscuous mode [ 232.959412][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.967251][ T7291] Cannot create hsr debugfs directory [ 233.011380][ T7313] team0: Port device team_slave_1 added [ 233.142446][ T7579] chnl_net:caif_netlink_parms(): no params data found [ 233.160729][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 233.171752][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.180715][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.207254][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.222025][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.232554][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.241223][ T7365] device bridge_slave_0 entered promiscuous mode [ 233.265434][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.273604][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.301732][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.332491][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.341022][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.349979][ T7365] device bridge_slave_1 entered promiscuous mode [ 233.551527][ T7313] device hsr_slave_0 entered promiscuous mode [ 233.599378][ T7313] device hsr_slave_1 entered promiscuous mode [ 233.638505][ T7313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.646077][ T7313] Cannot create hsr debugfs directory [ 233.670455][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.681350][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.694739][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.719947][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.727001][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.736742][ T7579] device bridge_slave_0 entered promiscuous mode [ 233.783246][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.794490][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.804823][ T7579] device bridge_slave_1 entered promiscuous mode [ 233.837556][ T7365] team0: Port device team_slave_0 added [ 233.889270][ T7365] team0: Port device team_slave_1 added [ 233.908363][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.915828][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.924919][ T7613] device bridge_slave_0 entered promiscuous mode [ 233.962039][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.974614][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.982369][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.990556][ T7613] device bridge_slave_1 entered promiscuous mode [ 234.011966][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.022030][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.053803][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.067427][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.090547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.099557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.126820][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.137322][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.163438][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.212446][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.234586][ T7579] team0: Port device team_slave_0 added [ 234.244682][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.257189][ T7291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.345174][ T7291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.412790][ T7579] team0: Port device team_slave_1 added [ 234.429841][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.441572][ T7291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.481895][ T7291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.592602][ T7365] device hsr_slave_0 entered promiscuous mode [ 234.648897][ T7365] device hsr_slave_1 entered promiscuous mode [ 234.698723][ T7365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.706300][ T7365] Cannot create hsr debugfs directory [ 234.746031][ T7613] team0: Port device team_slave_0 added [ 234.761806][ T7613] team0: Port device team_slave_1 added [ 234.768846][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.775823][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.806614][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.825503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.834607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.843842][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.851142][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.893314][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.902057][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.928252][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.956145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.999301][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.006291][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.033866][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.065117][ T7313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.114929][ T7313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.221750][ T7579] device hsr_slave_0 entered promiscuous mode [ 235.279295][ T7579] device hsr_slave_1 entered promiscuous mode [ 235.318854][ T7579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.326440][ T7579] Cannot create hsr debugfs directory [ 235.333523][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.341191][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.368327][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.381599][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.391824][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.401199][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.408275][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.434388][ T7313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.511203][ T7313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.595762][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.604578][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.614626][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.625035][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.694921][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.704962][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.714685][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.724981][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.734128][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.792614][ T7613] device hsr_slave_0 entered promiscuous mode [ 235.841506][ T7613] device hsr_slave_1 entered promiscuous mode [ 235.879633][ T7613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.887214][ T7613] Cannot create hsr debugfs directory [ 235.904951][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.915782][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.933565][ T7137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.139574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.147698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.170544][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.265128][ T7365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.334381][ T7365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.417898][ T7365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.488263][ T7365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.571547][ T7579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.629916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.641551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.650933][ T7579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.704281][ T7579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.770112][ T7613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.818986][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.831437][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.847975][ T7579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.881707][ T7613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.964536][ T7613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.037211][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.045939][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.065027][ T7137] device veth0_vlan entered promiscuous mode [ 237.074468][ T7613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.144542][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.152263][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.162981][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.171950][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.180381][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.193711][ T7137] device veth1_vlan entered promiscuous mode [ 237.232003][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.240460][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.248376][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.262173][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.273156][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.284443][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.291616][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.324507][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.336655][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.368525][ T7137] device veth0_macvtap entered promiscuous mode [ 237.414958][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.423292][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.436102][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.445045][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.454533][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.463950][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.471140][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.479132][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.487708][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.496345][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.503486][ T3137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.511670][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.520726][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.529574][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.537963][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.545186][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.553461][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.563738][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.572097][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.592069][ T7137] device veth1_macvtap entered promiscuous mode [ 237.620406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.628710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.640908][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.652306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.662388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.672289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.702604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.712432][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.722420][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.731479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.741382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.752295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.791285][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.800654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.811196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.820309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.829470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.843162][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.855548][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.877494][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.901540][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.913733][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.923837][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.933867][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.948045][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.971243][ T7313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.983733][ T7313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.009158][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.018386][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.037275][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.047578][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.099993][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.107506][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.116167][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.259557][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.267077][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.285098][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.315046][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.324156][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.334342][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.341526][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.349799][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.359803][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.368171][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.375318][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.387175][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.480958][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.492067][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.517835][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.557628][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.572236][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.586997][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:31:38 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2403, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0xce21, @broadcast}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 238.605700][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.616122][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.632837][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.648752][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.673115][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.705846][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.726432][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.736472][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.755115][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.788359][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.800895][ C0] hrtimer: interrupt took 31719 ns [ 238.856824][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.873881][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.889757][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.898766][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.935555][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.946009][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.960926][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.970734][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.980498][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.990359][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.998968][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.006045][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.023336][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.038297][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.066555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.077153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.086742][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.093913][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.102691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.112367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.124345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.133353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.142342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.152837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.162316][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.169454][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.182349][ T7291] device veth0_vlan entered promiscuous mode [ 239.220817][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.228863][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.240367][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.250020][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.258560][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.268123][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.275297][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.294759][ T7291] device veth1_vlan entered promiscuous mode [ 239.330981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.340730][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.350565][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.359700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.368066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.377346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.386221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.396009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.404855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.446031][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.458037][ T7613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.477504][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.487822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:31:39 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x40643) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000080)="7135e4fd27edf1f3c0dffa4091c23598d2d923724a5e0e1fe40e5c93b5d4345de0e86be56315040bc99f", 0x2a, 0x7}, {&(0x7f00000000c0)="cbc8c7", 0x3, 0x80}], 0x0, 0x0) [ 239.496587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.504733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.513265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.539940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.548538][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.582592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.592032][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.601851][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.613932][ T7313] device veth0_vlan entered promiscuous mode [ 239.633591][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.667359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 20:31:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 239.685812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.714542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.740011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.748905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.828607][ T7313] device veth1_vlan entered promiscuous mode [ 239.860152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.868582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.880123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.888610][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.906143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.916071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.926303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.936459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.944948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.965253][ T7291] device veth0_macvtap entered promiscuous mode [ 239.992163][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.006813][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.200395][ T7291] device veth1_macvtap entered promiscuous mode [ 240.217026][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.235999][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.246874][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.266334][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.276760][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.286826][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.354627][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.364315][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.377670][ T7313] device veth0_macvtap entered promiscuous mode [ 240.402595][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.414532][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.429509][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.450712][ T7365] device veth0_vlan entered promiscuous mode [ 240.458190][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.467285][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.476676][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.485837][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.495792][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.505544][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.514166][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.522205][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.530654][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.553369][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 240.568511][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:31:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 240.601502][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.620845][ T7313] device veth1_macvtap entered promiscuous mode [ 240.636548][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.644471][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.655520][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.674773][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.711101][ T7365] device veth1_vlan entered promiscuous mode [ 240.844360][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.906694][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.934002][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.948364][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 240.967539][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.981446][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.006721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.025010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.034777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.047578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.057673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.072999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.082943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.092268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.156072][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.168276][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.178904][ T7313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 241.189820][ T7313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.202518][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.233165][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.243033][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.253114][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.262665][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.272247][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.281161][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.292095][ T7365] device veth0_macvtap entered promiscuous mode [ 241.304832][ T7613] device veth0_vlan entered promiscuous mode [ 241.404713][ T7365] device veth1_macvtap entered promiscuous mode 20:31:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x4808c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 241.664352][ T7613] device veth1_vlan entered promiscuous mode 20:31:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x727}, 0x14}}, 0x0) 20:31:41 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = getpid() r2 = perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x0) close(r2) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x80, 0x7, 0x0, 0x6c, 0x0, 0x2, 0x480, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x52044, 0x7fffffff, 0x3, 0x1, 0xe4b, 0xec, 0x101}, 0x0, 0x5, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x13d}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000300)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7o\x80\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 241.855014][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.916351][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.943865][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.967153][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.985610][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 241.998294][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:31:41 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x3, 0x1}, 0xe) [ 242.021777][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.066061][ T8457] device lo entered promiscuous mode 20:31:41 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff00000000080001006874af001c00020018000200030000000001000000001e000800000000000000ce204b70759690626033cefc9f29f0a316c47d6335ffa3a711759f0cc96a64a78d1424d7fbb9ce04556e206ac506b1011a61efc33a09ebbb2af603af78d8b1c564eebfed008c914bfbadcd782389f49d356138458f10539554386cdc1a5949ec127445ab7ec5cb7e75d4565ff6b5bcfa2e670c666d929fd82579b295"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) [ 242.401247][ T7579] device veth0_vlan entered promiscuous mode [ 242.431633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.460266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.474873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.520005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.528958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.550137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.759564][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.770156][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.823648][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.856566][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.876575][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.905961][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.945444][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.970441][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.012648][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.030257][ T7579] device veth1_vlan entered promiscuous mode [ 243.051421][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.065431][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.076041][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.088798][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.175549][ T7613] device veth0_macvtap entered promiscuous mode [ 243.203283][ T7613] device veth1_macvtap entered promiscuous mode [ 243.345762][ T7579] device veth0_macvtap entered promiscuous mode [ 243.356009][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.373657][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.392561][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.412723][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.435380][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.447169][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.457743][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.468770][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:31:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003000179cf3c5000034000100300001000800010069666500200002801c00010000000000000000000000000000000000000000000000000004000600"/76], 0x48}}, 0x0) [ 243.497429][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.509543][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.519775][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.531135][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.552677][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.569973][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.581449][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.611417][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.640320][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.669489][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.694606][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.709190][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.725565][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.736358][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.746363][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.756872][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.766830][ T7613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.778492][ T7613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.790775][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.798993][ T7579] device veth1_macvtap entered promiscuous mode [ 243.818019][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.828936][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.841731][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.851627][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.927563][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.938669][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.950288][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.960851][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.970794][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.981289][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.991197][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.003785][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.014003][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.024515][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.046433][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.092234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.101207][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.196081][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.207549][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.217900][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.230381][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.240592][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.251158][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.261063][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.272183][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.282102][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.292608][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.303982][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.355518][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.372995][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:31:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000063ff2000000000009500000000000000f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1d56483fee2610b97f7bfc5bbeb1b700002005c1255c41740c016975b770f32e66d2fa18d102b966770412ccb30587d465c841a466871312ec3f16a2dfc547c69f75d2c8140427e6d37bcdf397ac81b7e6652130846c97d2d67904c1496945dcf86ca5227d43d096361ca0c6d0d65cf72a913083cfc359ffbaa71adf59acaa2d04ff7f8868c29c87ddafe74641f2d1c7d39799f1afd5b2f6681a6a5409811484caa0eca8a2e8fd8aa5069d201348329ee235a0b5deec3c366177ac8ba9d84cd2cfe4e821688368be3eff4d41e1e668"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:31:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000003000ef0300000000000000008baaa9edd65120f9440001000b000100736b626d6f64000030000280240002000000000000000000000000000000000000000000000000000000000000000600150000000000ffa66bfb11c504000600"], 0x5c}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 20:31:44 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = getpid() r2 = perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x0) close(r2) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x80, 0x7, 0x0, 0x6c, 0x0, 0x2, 0x480, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x52044, 0x7fffffff, 0x3, 0x1, 0xe4b, 0xec, 0x101}, 0x0, 0x5, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x13d}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000300)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7o\x80\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 20:31:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x101100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040840) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fddbdf25150000000a001a00000000000000000008000300", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000cf831e7cfe7b8c13e0b23fe3ea0b5e44678e93fec590edf9e2ffffff000000007eaee8b25c2ccb4e2bfc090c53a2e5a52ee9e6458a306227fd7051000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010040000000"], 0x3}}, 0x0) r10 = socket$inet6_sctp(0xa, 0xef03bd698781976c, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000040)="72ce1475790b2c3031975442e0db289a18", 0x11) fcntl$setflags(r10, 0x2, 0x1) 20:31:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x40400, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000400)=0x7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x306, @random="5a5e89b8b868"}, 0x40, {0x2, 0x4e21, @empty}, 'vcan0\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2100, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf25170000000a001a00aaaaaaaaaaaa00000a001a00aaaaaaaaaabb000008000100040000000800010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040840) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',!\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fddbdf251200000006003600c1ff00000600130033da00000600b5003a0600000500740003000000ed00ac00ae73c5122dec25f42e75372d1f3accd67d14049eebf9ad7f5be16a0b532eb7b2e064c356d924a82978e8730b43bc74622d322b374da575c41c0c657266be733b1386f8b48ad77e7f42288ba44c3cd86e35d851a723a43fca6ac736feb95b64b60f50009b5a55b15c6fcc9204757a4ef95b7ca363e84def0c70e6118e75e9204be8dbbf36666c6571eabdf363f3d5ca7353396663fd0672f0f67062e64629a066d91206b9ab5e11df8b58f44d751ff1a07a59edb08828450ad5cdd5fa02d415e726ac7e179f4e1edc59b7158fc5206fa95b97ed33d9e043402e3efba3df771c6a5198d7c765251ce25f000000050029000c000000"], 0x12c}}, 0x44000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000280)=0x20, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 20:31:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0xffd8) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) [ 244.770432][ T8504] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.808003][ T8504] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 20:31:44 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000380)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={[{@commit={'commit', 0x3d, 0x100000000}}]}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/71, 0x47) 20:31:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040), {0x7, 0x1, 0x20323159, 0xc, 0xffffffc1, 0x8, 0xb, 0x7}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x102, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000040)={0x6, 'macvlan0\x00', {0x4}, 0xb43d}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) sendfile(r5, r4, 0x0, 0x100000001) 20:31:44 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x4e20, 0x9, @private1, 0x10000}, @in], 0x4c) write(r0, &(0x7f0000000000)="d4556096b9842aa7832951f66e9ed55273945e11202c0bc14f97a002702f7497bfbac8b319ee2a91dfab536be8f19951d4195dce6ca0255f0d355f72fd2f0c1397a9a9ff1d7db8523ab9fd96f4f94ef8db7e6bfc6bd947ba2a94476eecdb60830cf127d0113f5c662092c7f59a4106e729c452c538b0de1954512ef248e078a72f91daa269bd8b815c2136281d8239db47a42cf746b848f572561c1771426e3b2d84497f26ce7a07cce889dc05268e22af0e56078840", 0xb6) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x206) sched_setattr(0x0, 0x0, 0x0) unshare(0x40000000) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 20:31:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r0) close(r1) r2 = gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) [ 245.069073][ T8526] REISERFS warning (device loop4): super-6508 reiserfs_parse_options: bad value 0x0000000100000000 for -ocommit [ 245.069073][ T8526] [ 245.228483][ T26] audit: type=1804 audit(1588105904.726:2): pid=8540 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir263588279/syzkaller.Wc6FOK/4/cgroup.controllers" dev="sda1" ino=15786 res=1 20:31:44 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000380)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={[{@commit={'commit', 0x3d, 0x100000000}}]}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/71, 0x47) 20:31:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x101900) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r5, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x138, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa296}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6657}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff36}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb0}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6960}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x591}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) [ 245.546800][ T8545] REISERFS warning (device loop4): super-6508 reiserfs_parse_options: bad value 0x0000000100000000 for -ocommit [ 245.546800][ T8545] 20:31:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}}, 0x4040000) 20:31:45 executing program 0: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r1}) dup3(r0, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 245.836158][ T26] audit: type=1804 audit(1588105905.336:3): pid=8528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir263588279/syzkaller.Wc6FOK/4/cgroup.controllers" dev="sda1" ino=15786 res=1 20:31:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getresgid(&(0x7f0000000400), &(0x7f0000000500), &(0x7f0000000540)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x14, 0x0, 0x0, r3) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x80000, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="0050644c509e0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000adb45d4e1c3cce90c7224cb5763fd3431a26d4c602257882b9031da3aec33266b927e24c5869cf56e273b8deb44a8f34fcfd10c39a57729003bcb0b80ee30205134004aca51930a8d29880af3d", @ANYBLOB, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b', @ANYBLOB, @ANYBLOB], 0x12, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sched_setattr(0x0, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000040)=0x100060, 0xa808) creat(&(0x7f0000000100)='./file0\x00', 0x0) 20:31:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x8) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) 20:31:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}}, 0x4040000) 20:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x0, 0x4000000000, 0x0, 0x4, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0xff) r3 = dup2(r1, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xfa, 0x8, 0x9, 0x3f, 0x0, 0x8, 0x80800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x91c, 0x5, @perf_bp={&(0x7f0000000080), 0x9}, 0x8128, 0x6, 0x7, 0x7, 0x2ef77c9f, 0x698b4d59, 0x6}, r6, 0x5, r8, 0xa793531ce3616c5d) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) 20:31:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}}, 0x4040000) 20:31:45 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000040)=0x200, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 246.292543][ T8572] 9pnet_virtio: no channels available for device 127.0.0.1 20:31:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = socket(0x3, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x11f08) sendfile(r6, r6, &(0x7f00000001c0)=0x40, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0x3}, 0x38) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x140c, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x9840) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '\x00'}, &(0x7f0000000180)=""/59, 0x3b) 20:31:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x6}, 0x0, 0x4000000000, 0x0, 0x4, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0xff) r3 = dup2(r1, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xfa, 0x8, 0x9, 0x3f, 0x0, 0x8, 0x80800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x91c, 0x5, @perf_bp={&(0x7f0000000080), 0x9}, 0x8128, 0x6, 0x7, 0x7, 0x2ef77c9f, 0x698b4d59, 0x6}, r6, 0x5, r8, 0xa793531ce3616c5d) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) 20:31:46 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000040)=0x200, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x20}}, 0x4040000) [ 246.495312][ T8578] 9pnet_virtio: no channels available for device 127.0.0.1 [ 246.524121][ T8572] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:31:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x8) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) 20:31:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x8) chown(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) 20:31:46 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000040)=0x200, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 20:31:46 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000040)=0x200, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 246.933697][ T8602] 9pnet_virtio: no channels available for device 127.0.0.1 [ 247.056805][ T8608] 9pnet_virtio: no channels available for device 127.0.0.1 20:31:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="f30f0866b8f5ffffff0f23c80f21f866350c00a0000f23f80f32f2a714f001fc29fc2938298a0d000f01df0f73f38a0f8fc579790000", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xe0003, 0x0, [0xf75]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/kvm\x00', &(0x7f0000000340)='/dev/kvm\x00', &(0x7f0000000440)='/dev/kvm\x00', &(0x7f0000000480)='ppp0\x00', &(0x7f00000004c0)='/dev/kvm\x00'], &(0x7f0000000640)=[&(0x7f0000000540)='/dev/kvm\x00', &(0x7f0000000580)='/dev/kvm\x00', &(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000600)='/dev/kvm\x00']) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x4000000, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:31:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) 20:31:46 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 247.349207][ T8621] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.483776][ T26] audit: type=1800 audit(1588105906.986:4): pid=8590 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15690 res=0 [ 247.567967][ T26] audit: type=1804 audit(1588105906.996:5): pid=8590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir955688082/syzkaller.sMpx9S/5/file0" dev="sda1" ino=15690 res=1 20:31:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="04003bb5"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x1004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) 20:31:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x66, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) 20:31:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000020040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) dup(r4) 20:31:47 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000040)={0x9, 0x9, 0x4, 0x4000, 0x3, {0x77359400}, {0x5, 0x1, 0x6, 0xe3, 0x7, 0x5, "5100e56d"}, 0x3, 0x2, @userptr=0xfff, 0x7f3a8bef, 0x0, r0}) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)='#', 0x1}], 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000840000000000000000000004fb88ecca"], 0x18}, 0x0) 20:31:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20:31:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES64, @ANYRES32], 0xe) 20:31:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) r5 = dup2(r2, r4) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3, 0x3, 0x1d, &(0x7f00005d5000/0x2000)=nil, 0x8}) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x480, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000340)={0x990000, 0x7, 0x10000, r7, 0x0, &(0x7f0000000280)={0x9b090e, 0xfff, [], @value64=0x664}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2823610b2002500023003f00000000000000000000000000000014bfede14a9f78ca0000ff84e851e81f46520c1af2b05c9b8400000020ceaa0000000001000000f818fa594314a74d"], 0x87ffffc) 20:31:47 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x1ff, 0x4, 0x8, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r3, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000500)={0x5, 0x2, 0x4, 0x100414, 0x8, {0x0, 0xea60}, {0x1, 0xc, 0x6, 0x1f, 0xfa, 0x5, "8dce25db"}, 0x3, 0x4, @fd=r4, 0x5, 0x0, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x7, 0xa, 0x72987a313a1054de, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}}, 0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7d6600000085fcc014", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=user,\x00']) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x324, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001000}, 0x24000800) 20:31:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x1ff, 0x4, 0x8, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r3, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000500)={0x5, 0x2, 0x4, 0x100414, 0x8, {0x0, 0xea60}, {0x1, 0xc, 0x6, 0x1f, 0xfa, 0x5, "8dce25db"}, 0x3, 0x4, @fd=r4, 0x5, 0x0, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x7, 0xa, 0x72987a313a1054de, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}}, 0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7d6600000085fcc014", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=user,\x00']) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x324, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001000}, 0x24000800) 20:31:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x66, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) 20:31:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="04003bb5"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x1004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) 20:31:48 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x66, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) [ 248.744387][ T26] audit: type=1800 audit(1588105908.246:6): pid=8684 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=22 res=0 20:31:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:48 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0xfffc}], 0x40) flock(r1, 0x6) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8ebb, 0x6, 0x3003, 0x4, 0x9, 0x0, 0x1, 0x5}}) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000003c0)={"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"}) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="4a00926d7ec4ff070000c65e6141b50da72aff360204000000572a61d12cedf4b72495f9295b751148838cd41f7f3801de8a661b658463989553bdf49ac8349591dc2a94859b1353a653c88e61eaabfd809c7e70ae", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000880) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000840)='minix\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x3, 0x0, [0xa0de, 0xfff, 0x7fffffff, 0x8, 0x1f, 0x0, 0x7, 0x4c0]}) 20:31:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x66, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) [ 249.479127][ T26] audit: type=1800 audit(1588105908.976:7): pid=8692 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=22 res=0 20:31:49 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)='}\'\x00', 0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="04003bb5"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x1004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) 20:31:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x10000, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x82140, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x4, {0x4, 0x8, "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", 0x2, 0x5, 0x7, 0x81, 0x9, 0x4, 0xc0}, r6}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, r6}}, 0x30) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 20:31:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x66, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x3f, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r8) 20:31:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffc) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r3}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x100}, 0x8) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, 0x0) 20:31:49 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:49 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x4000}) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e0100007d00000005ff0000"], 0xc) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x800}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) dup3(r3, r2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) 20:31:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x8, 0x9, 0x6, 0x2, 0x3, [{0xfffffffffffffff9, 0x7, 0x5, [], 0x1000}, {0x4, 0x3, 0x4, [], 0x1800}, {0x7ff, 0x7a26, 0x100000001, [], 0x212}]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x4800, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000001c0)=0x8001, &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) splice(r1, &(0x7f0000000100)=0x5, r2, &(0x7f0000000140)=0xba4, 0x4, 0x8) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) 20:31:49 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="04003bb5"], 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x1004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) [ 250.351656][ T8742] input: syz1 as /devices/virtual/input/input5 20:31:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x10000, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x82140, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x4, {0x4, 0x8, "b6da5dbb9c4f40d45d5968c8c802ff50acdc1fdb3694b477dcd27118660c34e8da6b12aa0abf30444e2432f8c20fc641bc2616a2564cbc885f258c2c141ff4ce69bdd4556cc2ef41e340d50f3cbdf48a775376673f4064432daae44ce0ba2a9966ec9b78dda06f485de6f301090392dfcae87bf8efc95730363bfa443347608d8cd0e7be1917563855f8f278164b29abb202c365a26ca054e5d33dcfec813fac93119586da1af387e234d269fd445dfe24bdb726a31c9c6626a6846d87dc4ffac2d2b4f3620438d2ea3467ef9c5f0b76baa9ef234cde51f5da55c6580dcc2d4189788ee8ecb3630a565e01a89ad3c904d9b387313659ab59cf7f933118899fb4", 0x2, 0x5, 0x7, 0x81, 0x9, 0x4, 0xc0}, r6}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, r6}}, 0x30) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 20:31:50 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095a0612687ecb86a548802a900700110000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}, {&(0x7f0000000180)="dcc2b5a8dd106f82f6aacd3dced3373846445f0223785a945f7fbf752187ed8b66b09f3cd6920e713d7a22a4b261157e059ec2d9fdd27af93a7c73d890e1c4afa38a8e3dcfc7656750321fb9ed879338676c067fc3d9fcb5263a5ec1b5c834806fc99e991c664d298eb39b716b112a28db886af1af02c4", 0x77, 0xfffffffffffffffa}], 0x0, &(0x7f0000000100)={[{@nobarrier='nobarrier'}]}) 20:31:50 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x4000}) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e0100007d00000005ff0000"], 0xc) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x800}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) dup3(r3, r2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) 20:31:50 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 250.803626][ T8769] EXT4-fs (loop1): Invalid log block size: 268529664 20:31:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={[{@shortname_lower='shortname=lower'}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7d, 0x400, 0xd2bf, 0x2, 0x10}}) 20:31:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) [ 250.913380][ T8769] EXT4-fs (loop1): Invalid log block size: 268529664 20:31:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x81) syz_open_procfs(0x0, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @empty}}}, 0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:31:50 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x4000}) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e0100007d00000005ff0000"], 0xc) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x800}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) dup3(r3, r2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) 20:31:50 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 251.076646][ T8781] FAT-fs (loop4): bogus number of reserved sectors [ 251.084393][ T8781] FAT-fs (loop4): Can't find a valid FAT filesystem 20:31:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b65b069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd1fffffff00002c00632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 20:31:51 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:51 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) syncfs(r2) 20:31:51 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x15) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) pkey_alloc(0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x2) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) times(&(0x7f0000000040)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x102) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}, 0x0, [0xffffffff, 0x3ff, 0x81, 0x7fffffff, 0x9, 0x5, 0x3, 0x3]}, 0x5c) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000010001d0d89fdc5cbdd041d8e825798707bed4dca14a7960f0f8ec8da78031c7660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c593df1dad02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x6a, 0xc000, 0x0, 0x0) 20:31:51 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008108040f80854ab17eab1c95", 0x12}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:51 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x4000}) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e0100007d00000005ff0000"], 0xc) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x800}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) dup3(r3, r2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x7fff, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) 20:31:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x81) syz_open_procfs(0x0, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @empty}}}, 0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 252.164525][ T26] audit: type=1800 audit(1588105911.666:8): pid=8801 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15805 res=0 20:31:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x81) syz_open_procfs(0x0, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @empty}}}, 0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:31:51 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000016000a00", @ANYRES16=r3], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x600, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="745f57823ea9a4e2fb3678de76c8629a", 0x10}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/4108, 0x3000}], 0x1, 0x0, 0x0, 0x40000}}], 0x52, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000200)="90e45588510f7a8c091b66cc9fa59cbdb99b564079a81aa8f8a2822b723eb4fc380c1348133e1efda18c4815c293169bb80ce2aa0c205f5f7a94bb94b3932acd", 0x40}, {&(0x7f0000000400)="dd8702fc9dd76222f76ff6ceb126abe9153ef5cf0754aa825db0295c1112e14b3a32d69e80a1374d1b41793bad836823bd3895ff60e160d310139f9ffdc64d83b46839a3ac6bf201f4d7629e5a7c8ed3f0196a905d1ac1bd2ba26cf46baf325d5868b36c317591b691503031d482c98e9ae2ac6eb48176c4378ad99151032f482721261378bdff10a2df805eb3078499aa50c67e13131505fcdce8b29b477bd0ccbf261b00cdbcc9daa52dc60236451bedb9d71ce3e5c18ffa221b916b1eab14934df267bbdafe40682dbe6596bcef23d3", 0xd1}], 0x3) 20:31:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r4, 0x2, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/partitions\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x23, 0x1, ']{procposix_acl_accessvboxnet1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xea6f3a9d8f8464e5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8841}, 0xc0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r6 = openat$mice(0xffffffffffffff9c, 0x0, 0x10400) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:31:51 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 252.529333][ T26] audit: type=1804 audit(1588105912.026:9): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/20/bus" dev="sda1" ino=15830 res=1 20:31:52 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x5, &(0x7f0000000140)=[{&(0x7f0000000100)="41bb0dd1649264b285454fbca25311ce532202", 0x13, 0x81}, {&(0x7f0000000340)="d979e94bd57700bc6753a0a572b2923f1a819c0b1d3b41bfe3cea002e9ad587a8fe9a1868c6b6e66ef37258fad35d776b034d1604799bb2342e88f59ea9f2809829885c59ae32f140d5431e142b401e867366901866e670516c63efb129fba78ac8e139dc0fe469b3362c4df3aeee2e59fea84894a4fa6f8443675590141090ef8ddcf358f850ec5ee0855", 0x8b, 0xe00000}, {&(0x7f0000000400)="9a403da25d436083123e9afb4a756270cbe8b83352a6cf9c1ab8cebec9971bc329f73b90fd77011893895a821375c648b238cc358bc129532c4312700335d813fe335794130cb3457c8db1f54c276e8bb3a24c80a5cdab71120b852a9f49407ac61db74f517eea1df21529a545f3638b5a5c3e683c05b31f04820603cb532103f3ce1a83e7da9254a1aabea5872ec0bb08bec789d4a561b69ea2b93b259b0900e606002afba3ca4f5d5e81a9533836cdfd1efcdd1bb1df5d0b114a121fc18e55cdee8db271be7e8ef355964d229a0c088128a5b42058407aa89507dd35e52313fda25f1aab470163dd013c659a07232736b542a7ec1c9914b47ed0", 0xfb, 0x9}, {&(0x7f0000000500)="46ccf09175498778fe0ba87e9a0d2c0fd1f433ad739157950728962d21d1244d5f7d6bdd8060ee1de816e6ebbe2e3ce6f64b33ddf75fcb9a0df42d643b445bc54dd23167aadcee74bfe33dc25bf414ccf0216fb9397947b2d3cce305ff8b6e9964dc7ac8e93ddd30b699bded3ba736a01cf8b87e3d50b4ae044d791518c71da2f72c49fcc8a87ceabd93d2c25eac8e4d5d122d3858aee4b97e05cd28bc205c73c1ccc4ae19976bda54d5", 0xaa, 0x2}, {&(0x7f00000005c0)="64bc5f554f95ac1a23fc640689f0008e61ea9df9a8c8b79d248b080d63cdceaaf5061263f0408594b1cfbea62943c2e78883c15a2a27011097c7d66caf7e6c084f51d1d6af99b577ed9a6b676ac0f1d984907c7683b3dc88527584d7e243c2be53202272b7fe89606641117f207c9315e8bb71a98531120db4b7aacae1cf6ae992df2fbdba4fd00287006a74087ee2df3a82a837f9a1d4a805d1fc99cbc9698b3cda868372a89cc3d4cadebdf634516e4d64cf3c4bb8e2ae1d424676cb7427cdb7824a6504f5abef8031d9b1659e71311a6fb996d0d90e", 0xd7, 0x5c8}], 0x40000, &(0x7f0000000740)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c7379735f696d6d757461626c652c7065726da869745f646972656374696f2c61707072616973655f747970653d696d617369672c7375626a5f726f6c653d76666174002c00"]) [ 253.247710][ T26] audit: type=1804 audit(1588105912.746:10): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/20/bus" dev="sda1" ino=15830 res=1 [ 253.309309][ T26] audit: type=1804 audit(1588105912.746:11): pid=8836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/20/bus" dev="sda1" ino=15830 res=1 20:31:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffde2, &(0x7f00000000c0)=[{&(0x7f0000000040)="6b48000034000502d25a80648c63940d0424fc60081200000a000b0005358221f0792e375900098000f01700d1bd", 0x33fe0}], 0x1}, 0x20008840) socket$nl_netfilter(0x10, 0x3, 0xc) sysinfo(&(0x7f0000000100)=""/210) 20:31:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x81) syz_open_procfs(0x0, 0x0) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @empty}}}, 0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 253.355192][ T8857] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 20:31:52 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 253.463407][ T8857] FAT-fs (loop4): Filesystem has been set read-only [ 253.505100][ T8861] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 253.562559][ T8861] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 253.613104][ T8857] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 20:31:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x5, &(0x7f0000000140)=[{&(0x7f0000000100)="41bb0dd1649264b285454fbca25311ce532202", 0x13, 0x81}, {&(0x7f0000000340)="d979e94bd57700bc6753a0a572b2923f1a819c0b1d3b41bfe3cea002e9ad587a8fe9a1868c6b6e66ef37258fad35d776b034d1604799bb2342e88f59ea9f2809829885c59ae32f140d5431e142b401e867366901866e670516c63efb129fba78ac8e139dc0fe469b3362c4df3aeee2e59fea84894a4fa6f8443675590141090ef8ddcf358f850ec5ee0855", 0x8b, 0xe00000}, {&(0x7f0000000400)="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", 0xfb, 0x9}, {&(0x7f0000000500)="46ccf09175498778fe0ba87e9a0d2c0fd1f433ad739157950728962d21d1244d5f7d6bdd8060ee1de816e6ebbe2e3ce6f64b33ddf75fcb9a0df42d643b445bc54dd23167aadcee74bfe33dc25bf414ccf0216fb9397947b2d3cce305ff8b6e9964dc7ac8e93ddd30b699bded3ba736a01cf8b87e3d50b4ae044d791518c71da2f72c49fcc8a87ceabd93d2c25eac8e4d5d122d3858aee4b97e05cd28bc205c73c1ccc4ae19976bda54d5", 0xaa, 0x2}, {&(0x7f00000005c0)="64bc5f554f95ac1a23fc640689f0008e61ea9df9a8c8b79d248b080d63cdceaaf5061263f0408594b1cfbea62943c2e78883c15a2a27011097c7d66caf7e6c084f51d1d6af99b577ed9a6b676ac0f1d984907c7683b3dc88527584d7e243c2be53202272b7fe89606641117f207c9315e8bb71a98531120db4b7aacae1cf6ae992df2fbdba4fd00287006a74087ee2df3a82a837f9a1d4a805d1fc99cbc9698b3cda868372a89cc3d4cadebdf634516e4d64cf3c4bb8e2ae1d424676cb7427cdb7824a6504f5abef8031d9b1659e71311a6fb996d0d90e", 0xd7, 0x5c8}], 0x40000, &(0x7f0000000740)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c7379735f696d6d757461626c652c7065726da869745f646972656374696f2c61707072616973655f747970653d696d617369672c7375626a5f726f6c653d76666174002c00"]) 20:31:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44010000100013070000000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d5fa8ac0f16f000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x144}}, 0x0) 20:31:53 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) [ 254.244924][ T8873] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. [ 254.325610][ T8876] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 20:31:53 executing program 5: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 254.550637][ T8881] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 254.586285][ T8881] FAT-fs (loop4): Filesystem has been set read-only [ 254.638637][ T8886] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 20:31:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r4, 0x2, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/partitions\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x23, 0x1, ']{procposix_acl_accessvboxnet1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xea6f3a9d8f8464e5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8841}, 0xc0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r6 = openat$mice(0xffffffffffffff9c, 0x0, 0x10400) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:31:54 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'caif0\x00', {0x10001}, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:31:54 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="1f07cb4865bf515f1660"]) 20:31:54 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:55 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r4, 0x2, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/partitions\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x23, 0x1, ']{procposix_acl_accessvboxnet1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xea6f3a9d8f8464e5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8841}, 0xc0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r6 = openat$mice(0xffffffffffffff9c, 0x0, 0x10400) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) read(r5, &(0x7f0000000180)=""/19, 0xfffffe47) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:31:55 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:55 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:55 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:55 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:55 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080007"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="81fa03f9", @ANYRES16=r4, @ANYBLOB="020028bd7000fedbdf2503000000080006000400000014000180060001000a000000060001000200000008000400070000000800060001000000080004000700000030000180080005000400000014000300fc010000000000000000000000000000060004004e24000008000800fcffffff"], 0x78}, 0x1, 0x0, 0x0, 0x20000404}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2840010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044850}, 0x24000840) [ 256.412747][ T26] audit: type=1804 audit(1588105915.915:12): pid=8915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir263588279/syzkaller.Wc6FOK/16/bus" dev="sda1" ino=15841 res=1 [ 256.932873][ T26] audit: type=1804 audit(1588105916.435:13): pid=8911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/21/bus" dev="sda1" ino=15840 res=1 [ 257.276527][ T26] audit: type=1804 audit(1588105916.775:14): pid=8915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir263588279/syzkaller.Wc6FOK/16/bus" dev="sda1" ino=15841 res=1 [ 257.447492][ T26] audit: type=1804 audit(1588105916.935:15): pid=8915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir263588279/syzkaller.Wc6FOK/16/bus" dev="sda1" ino=15841 res=1 [ 257.481630][ T26] audit: type=1804 audit(1588105916.965:16): pid=8911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/21/bus" dev="sda1" ino=15840 res=1 [ 257.530820][ T26] audit: type=1804 audit(1588105917.015:17): pid=8911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir295977580/syzkaller.Ytmhc9/21/bus" dev="sda1" ino=15840 res=1 20:31:57 executing program 0: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 20:31:57 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x6b}}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x2c8, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfa6b258}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bf7d601}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39959353}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f4f4619}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34f55e55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41a8c910}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c4074a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10fe276b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5447d3db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26f81344}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c0368b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x722906c8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x583cc822}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c541a4b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1221}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1515bf8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2b5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f71e063}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e36}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x324}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ceb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e976af5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf65114a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20cc5135}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x379f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df58354}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb672}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8606}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x525111cb}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x641dbbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b96d9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc3a142}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d3609b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e5d7660}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb58}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0b62a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b9c7a4}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68128503}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ad7df98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x696a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2af02515}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa14f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a2b838}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be63b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31bd7891}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16fd79a1}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:31:57 executing program 5: setuid(0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0x0, r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0x0, r8) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r12, 0x0, r11) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x1, 0x2}, [{}, {0x2, 0x6}, {0x2, 0x7, r4}], {0x4, 0x5}, [{0x8, 0x2, 0xee00}, {0x8, 0x4, r1}, {0x8, 0x0, r5}, {0x8, 0x0, r8}, {0x8, 0x0, r11}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x6) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_newroute={0x24, 0x18, 0x100, 0x70bd2b, 0x25dfdbff, {0x1c, 0x10, 0x80, 0xfd, 0xfd, 0x4, 0xfe, 0x9, 0x2000}, [@RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c040}, 0x0) 20:31:57 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x600200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r7) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file1\x00', 0x37f5, 0x0, 0x0, 0x408, &(0x7f0000000400)=ANY=[@ANYBLOB="73756e69743d3078303030303030303030303030303030362c7377696474683d30783034303030651b8cdd14f22eec470bbbce4904227e6ab2f8eecae7b3b9df94c3362da3848ab3459f1d4b4384b7261cfb9dbc6997ab2b473d9defd33ea2f19a8088ecd1db32a7daefd6b5f0440e7669c5779526e1fa375949f528fa9bc34f84ab05c02473586d7f4e1dbe857e749a01c576f133a5aa08712ab2f0e1a120870f2d06e7c14956f5ed6f42d75caca0ef22847b1ee0145db0144b6f44d157e1f3fd0e38765b728f5822e961cfdb7c43c45d846470d02ad4e2637268965074b385c50ea0ab91ab5ab7d62078d2b46b4b1899ce1ed6fe5d654371dc79a1a8a5065a7d3e4bd8bdfcc838f3ed15920b13aa1006a09fd0582b1ceb64eceb8bcd95867d85b8edc17f81b1cd23b68a79a1b1a424d4ce9ea38bcf44bb4deeb4a6abe19702b8d2f72b6530208a56799ee6fcfc07411bd7add4b73b553bacd989c3e369a136a9de7b587ec64763ee96de3cd405f999f2c1b0468fb3ebc118c4f67ee9f7b75fc0f77747eb16ac6eeb5a2ceb3fa3dd531eaf34458a12e6e9ee19a0b699070000000000000043328ecaf2ca10105cea"]) 20:31:57 executing program 0: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 20:31:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000054b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000f"], 0x3}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:31:58 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = fcntl$dupfd(r5, 0x0, r2) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000fffdffff0000000009fd000068667363000054e6a216c20000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', r7}) ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0) [ 258.563980][ T8949] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.572326][ T8958] xfs: Bad value for 'swidth' 20:31:58 executing program 0: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 20:31:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x47, 0x2, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x8000, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) close(r1) [ 258.719091][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:31:58 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lc\x00', 0x0, 0x1}, {@empty, 0x4e24}}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x2200040, 0x0) [ 258.773971][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:31:58 executing program 0: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:58 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x5, 0x70, 0x80, 0xfe, 0x6, 0x5, 0x0, 0x40002b9, 0x24004, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10040, 0x1, 0x100, 0x1, 0x0, 0x41, 0x8}) r5 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20000, 0x50) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000140)={0x6, 0xfffffff7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) r6 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x4, 0x768ea8a4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x2, 0x36e}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) [ 258.943914][ T8978] FAT-fs (loop5): bogus number of reserved sectors [ 258.957049][ T8978] FAT-fs (loop5): Can't find a valid FAT filesystem [ 259.065152][ T8988] FAT-fs (loop5): bogus number of reserved sectors [ 259.082890][ T8988] FAT-fs (loop5): Can't find a valid FAT filesystem 20:31:58 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420000a77, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100), 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x9, 0x7}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, @in], 0x40) 20:31:58 executing program 0: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', r6}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="a40102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173485f66756e6300000000000000000000000000000000000000050003000b0000003400040004000258ffff00000200000000084007000000200000001e3d0000000000c8007f0000000000000024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400000000000000000000000000f951d3124f4d9b7172e610759ad16a7950e6be3b052944af19a00c8fdb28ad082723748d510f600739a0cc6e6b0a146acf7a78c9784606b08871738155253de000d7770f93a152", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r10, @ANYBLOB="04000280"], 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800040a6000f0ffff7c05e87c55a1bc000900b8000699030000000500160007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb800fa007a690457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xcb}], 0x1}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/dlm-control\x00', 0x101000, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="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", 0xfc, 0x20008011, 0x0, 0x0) 20:31:58 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 20:31:58 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x44010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x6628, &(0x7f0000000040)={0xd000000}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x7, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) 20:31:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) sendfile(0xffffffffffffffff, r0, 0x0, 0x9) 20:31:58 executing program 0: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 259.367162][ T9003] CIFS: Attempting to mount (null) [ 259.400352][ T9003] CIFS VFS: Device name not specified. [ 259.424679][ T9003] CIFS VFS: Malformed UNC in devname. 20:31:58 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f02", 0x8) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) [ 259.478870][ T9003] CIFS: Attempting to mount (null) 20:31:59 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 259.501206][ T9003] CIFS VFS: Device name not specified. [ 259.536007][ T9003] CIFS VFS: Malformed UNC in devname. 20:31:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a9f6c7197b083edc5857380000982d0300", @ANYRES16=r6, @ANYBLOB="08002bbd7000fedbdf2504000000140002e8756972745f7769666930000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4400010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30200d1d", @ANYRES16=r6, @ANYBLOB="020327bd7000fddbdf25040000000900010073797a320000000005000400000000000500040001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r6, 0x3, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x8800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080800001028e6c467144d2fa833bbe4447afd407c49f3897d1919ea325881ff053419acb70a0affc980123d4377eadf3437e91f0afa85259c5c4ee4a830ff2f08bf679f7a486678e6ac84000d8164510afb66b15c1d3039505bc221d01585dcd06c0b04"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}}, 0x0) 20:31:59 executing program 0: r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 20:31:59 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040840) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7f}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x81}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}]}, 0x2c}}, 0x4000040) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, &(0x7f0000000680)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000000)) [ 259.854880][ T3137] general protection fault, probably for non-canonical address 0xdffffc001fffffea: 0000 [#1] PREEMPT SMP KASAN [ 259.854891][ T3137] KASAN: probably user-memory-access in range [0x00000000ffffff50-0x00000000ffffff57] [ 259.854905][ T3137] CPU: 0 PID: 3137 Comm: kworker/0:72 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 259.854913][ T3137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.855001][ T3137] Workqueue: events console_callback [ 259.855071][ T3137] RIP: 0010:fbcon_cursor+0x10e/0x650 [ 259.855085][ T3137] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e2 04 00 00 4c 8b bd f0 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <0f> b6 14 02 4c 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 b1 [ 259.855092][ T3137] RSP: 0018:ffffc90001347b18 EFLAGS: 00010202 [ 259.855103][ T3137] RAX: dffffc0000000000 RBX: ffff88821923fc00 RCX: ffffffff83e9e52d [ 259.855111][ T3137] RDX: 000000001fffffea RSI: ffffffff83be2599 RDI: ffff8880a64213f0 [ 259.855120][ T3137] RBP: ffff8880a6421000 R08: ffff8880a827e440 R09: ffffed10431dd49c [ 259.855128][ T3137] R10: ffff888218eea4df R11: ffffed10431dd49b R12: ffff888218ef6000 [ 259.855136][ T3137] R13: 0000000000000001 R14: ffff888218ef64a0 R15: 00000000ffffff50 [ 259.855147][ T3137] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 259.855155][ T3137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.855163][ T3137] CR2: 0000001b2df25000 CR3: 00000000a495b000 CR4: 00000000001406f0 [ 259.855174][ T3137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.855182][ T3137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.855185][ T3137] Call Trace: [ 259.855201][ T3137] ? add_softcursor+0x5e/0x2f0 [ 259.855213][ T3137] ? fbcon_set_palette+0x3b1/0x4a0 [ 259.855227][ T3137] set_cursor+0x1e6/0x230 [ 259.855241][ T3137] redraw_screen+0x4b7/0x770 [ 259.855255][ T3137] ? respond_string+0x290/0x290 [ 259.855303][ T3137] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 259.855345][ T3137] ? get_color+0x20f/0x420 [ 259.855394][ T3137] complete_change_console+0x104/0x3a0 [ 259.855411][ T3137] change_console+0x197/0x2c0 [ 259.855426][ T3137] console_callback+0x3b1/0x410 [ 259.855440][ T3137] ? poke_blanked_console+0x270/0x270 [ 259.855495][ T3137] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 259.855570][ T3137] ? _raw_spin_unlock_irq+0x1f/0x80 [ 259.855610][ T3137] process_one_work+0x965/0x16a0 [ 259.855636][ T3137] ? lock_release+0x800/0x800 [ 259.855651][ T3137] ? pwq_dec_nr_in_flight+0x310/0x310 [ 259.855687][ T3137] ? rwlock_bug.part.0+0x90/0x90 [ 259.855706][ T3137] worker_thread+0x96/0xe20 [ 259.855724][ T3137] ? process_one_work+0x16a0/0x16a0 [ 259.855758][ T3137] kthread+0x388/0x470 [ 259.855772][ T3137] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 259.855785][ T3137] ret_from_fork+0x24/0x30 [ 259.855796][ T3137] Modules linked in: [ 259.855813][ T3137] ---[ end trace f1605ea7c1600df0 ]--- [ 259.855827][ T3137] RIP: 0010:fbcon_cursor+0x10e/0x650 [ 259.855840][ T3137] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e2 04 00 00 4c 8b bd f0 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <0f> b6 14 02 4c 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 b1 [ 259.855847][ T3137] RSP: 0018:ffffc90001347b18 EFLAGS: 00010202 [ 259.855858][ T3137] RAX: dffffc0000000000 RBX: ffff88821923fc00 RCX: ffffffff83e9e52d [ 259.855867][ T3137] RDX: 000000001fffffea RSI: ffffffff83be2599 RDI: ffff8880a64213f0 [ 259.855875][ T3137] RBP: ffff8880a6421000 R08: ffff8880a827e440 R09: ffffed10431dd49c [ 259.855883][ T3137] R10: ffff888218eea4df R11: ffffed10431dd49b R12: ffff888218ef6000 [ 259.855891][ T3137] R13: 0000000000000001 R14: ffff888218ef64a0 R15: 00000000ffffff50 [ 259.855902][ T3137] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 259.855910][ T3137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.855918][ T3137] CR2: 0000001b2df25000 CR3: 00000000a495b000 CR4: 00000000001406f0 [ 259.855929][ T3137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.855936][ T3137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.855943][ T3137] Kernel panic - not syncing: Fatal exception [ 259.857059][ T3137] Kernel Offset: disabled [ 260.257330][ T3137] Rebooting in 86400 seconds..