[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.296437][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 59.296454][ T27] audit: type=1800 audit(1580031987.004:29): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 59.322857][ T27] audit: type=1800 audit(1580031987.004:30): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2020/01/26 09:46:37 fuzzer started 2020/01/26 09:46:38 dialing manager at 10.128.0.105:37311 2020/01/26 09:46:39 syscalls: 2893 2020/01/26 09:46:39 code coverage: enabled 2020/01/26 09:46:39 comparison tracing: enabled 2020/01/26 09:46:39 extra coverage: enabled 2020/01/26 09:46:39 setuid sandbox: enabled 2020/01/26 09:46:39 namespace sandbox: enabled 2020/01/26 09:46:39 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/26 09:46:39 fault injection: enabled 2020/01/26 09:46:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/26 09:46:39 net packet injection: enabled 2020/01/26 09:46:39 net device setup: enabled 2020/01/26 09:46:39 concurrency sanitizer: enabled 2020/01/26 09:46:39 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 77.743771][ T7915] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/26 09:46:53 adding functions to KCSAN blacklist: 'blk_mq_run_hw_queue' 'timer_clear_idle' 'xas_find_marked' 'pid_update_inode' 'fib6_ifup' 'ext4_mark_iloc_dirty' 'mod_timer' 'audit_log_start' '__snd_rawmidi_transmit_ack' 'fsnotify' 'find_next_bit' 'do_nanosleep' 'taskstats_exit' 'blk_mq_sched_dispatch_requests' 'd_delete' 'ext4_writepages' 'generic_update_time' 'iomap_dio_bio_actor' 'ep_poll' 'echo_char' 'rcu_gp_fqs_loop' '__ext4_new_inode' 'unix_release_sock' 'wbt_done' 'wbt_issue' 'shmem_getpage_gfp' 'do_signal_stop' 'find_get_pages_range_tag' 'kauditd_thread' 'commit_echoes' 'tomoyo_domain_quota_is_ok' 'snd_timer_pause' 'poll_schedule_timeout' 'shmem_file_read_iter' '__add_to_page_cache_locked' 'n_tty_receive_buf_common' 'pipe_double_lock' 'tick_nohz_idle_stop_tick' 'process_srcu' 'snd_seq_check_queue' 'do_exit' 'virtqueue_enable_cb_delayed' 'atime_needs_update' 'ip_tunnel_xmit' 'wbt_wait' 'tick_sched_do_timer' 'copy_process' 'shmem_add_to_page_cache' 'ext4_mb_good_group' '__mark_inode_dirty' 'wbc_detach_inode' '__hrtimer_run_queues' 'tomoyo_supervisor' 'ext4_nonda_switch' 'ktime_get_real_seconds' 'vti_tunnel_xmit' 'sit_tunnel_xmit' 'delete_from_page_cache_batch' '__filemap_fdatawrite_range' 'other_inode_match' 'ondemand_readahead' 'ext4_free_inode' 'blk_mq_dispatch_rq_list' 'ext4_free_inodes_count' 'run_timer_softirq' 'pcpu_alloc' 'ktime_get_seconds' 'iptunnel_xmit' 'tick_do_update_jiffies64' '__process_echoes' 'rcu_gp_fqs_check_wake' 'generic_write_end' 'has_bh_in_lru' 'complete_signal' 'blk_mq_get_request' 'dd_has_work' '__lru_cache_add' 'ext4_has_free_clusters' 'clear_inode' 'snd_seq_prioq_cell_out' 'do_syslog' 'vm_area_dup' 'generic_fillattr' 'get_cpu_idle_time_us' '__delete_from_page_cache' 'generic_file_read_iter' 'xas_clear_mark' 'futex_wait_queue_me' 09:50:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stack\x00') lseek(r0, 0x203ffffd, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 316.220273][ T7917] IPVS: ftp: loaded support on port[0] = 21 09:50:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000200)) [ 316.295125][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 316.332768][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.353425][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.373741][ T7917] device bridge_slave_0 entered promiscuous mode [ 316.381441][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.404000][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.413788][ T7917] device bridge_slave_1 entered promiscuous mode [ 316.453998][ T7922] IPVS: ftp: loaded support on port[0] = 21 [ 316.464917][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.475787][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.524313][ T7917] team0: Port device team_slave_0 added [ 316.531554][ T7917] team0: Port device team_slave_1 added [ 316.561680][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.574152][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.602796][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 09:50:44 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) [ 316.634527][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.641805][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.669521][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.692167][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 316.745820][ T7917] device hsr_slave_0 entered promiscuous mode [ 316.783730][ T7917] device hsr_slave_1 entered promiscuous mode [ 316.841515][ T7925] IPVS: ftp: loaded support on port[0] = 21 [ 316.903058][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.923447][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.931287][ T7922] device bridge_slave_0 entered promiscuous mode [ 316.959119][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.973526][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.981330][ T7922] device bridge_slave_1 entered promiscuous mode [ 317.016921][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.028090][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.055326][ T7922] team0: Port device team_slave_0 added 09:50:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20200, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = open(0x0, 0x141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa2391001f008100400008060001080006040008aaaaaaaaaabb7f000001aaaa9faaaa3effffffff"], 0x32) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000140)='./file0\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', {0x2}, 0xf382}) r3 = mq_open(&(0x7f0000000100)='cgroup\x00', 0x40, 0x34, &(0x7f0000000180)={0x5, 0x5, 0x8001, 0x6}) dup2(r1, r3) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getpgrp(0x0) [ 317.074361][ T7922] team0: Port device team_slave_1 added [ 317.131405][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.153786][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.203582][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.224420][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.232225][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.303407][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.339735][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 317.365651][ T7917] netdevsim netdevsim0 netdevsim0: renamed from eth0 09:50:45 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1a01, 0x4000000000dc) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000002800)) r2 = getpid() tkill(r2, 0x9) getpgrp(0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) [ 317.430977][ T7929] IPVS: ftp: loaded support on port[0] = 21 [ 317.448201][ T7917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.517167][ T7917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.579831][ T7917] netdevsim netdevsim0 netdevsim3: renamed from eth3 09:50:45 executing program 5: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000240), 0xb) [ 317.705992][ T7922] device hsr_slave_0 entered promiscuous mode [ 317.763702][ T7922] device hsr_slave_1 entered promiscuous mode [ 317.813462][ T7922] debugfs: Directory 'hsr0' with parent '/' already present! [ 317.845347][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.852813][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.860771][ T7925] device bridge_slave_0 entered promiscuous mode [ 317.872901][ T7931] IPVS: ftp: loaded support on port[0] = 21 [ 317.889183][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.896505][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.904422][ T7925] device bridge_slave_1 entered promiscuous mode [ 317.905757][ T7933] IPVS: ftp: loaded support on port[0] = 21 [ 317.996159][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.008551][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.027437][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.076821][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.098263][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.106117][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.114363][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.122866][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.132010][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.140416][ T7921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.152526][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.160715][ T7922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.225876][ T7922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.281479][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 318.292421][ T7925] team0: Port device team_slave_0 added [ 318.299401][ T7925] team0: Port device team_slave_1 added [ 318.306610][ T7922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.360990][ T7922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.471094][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.479106][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.506034][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.517184][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.526313][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.535247][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.542308][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.552848][ T7929] chnl_net:caif_netlink_parms(): no params data found [ 318.571782][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.579192][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.588490][ T7931] device bridge_slave_0 entered promiscuous mode [ 318.598333][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.605543][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.613914][ T7931] device bridge_slave_1 entered promiscuous mode [ 318.622281][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.629542][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.656590][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.706193][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.765919][ T7925] device hsr_slave_0 entered promiscuous mode [ 318.803821][ T7925] device hsr_slave_1 entered promiscuous mode [ 318.853818][ T7925] debugfs: Directory 'hsr0' with parent '/' already present! [ 318.892615][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.900404][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.908242][ T7929] device bridge_slave_0 entered promiscuous mode [ 318.915729][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.925632][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.934760][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.944302][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.953118][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.962498][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.974564][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.985637][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.995289][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.002339][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.012079][ T7929] device bridge_slave_1 entered promiscuous mode [ 319.027998][ T7933] chnl_net:caif_netlink_parms(): no params data found [ 319.055817][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.066307][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.081850][ T7917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.092692][ T7917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.110074][ T7931] team0: Port device team_slave_0 added [ 319.129476][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.139556][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.148026][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.156754][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.172059][ T7931] team0: Port device team_slave_1 added [ 319.189910][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.196983][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.223065][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.237103][ T7929] team0: Port device team_slave_0 added [ 319.250475][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.265033][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.272063][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.299480][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.311300][ T7929] team0: Port device team_slave_1 added [ 319.327781][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.335007][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.342617][ T7933] device bridge_slave_0 entered promiscuous mode [ 319.369764][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.376801][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.402833][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.414447][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.421690][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.430456][ T7933] device bridge_slave_1 entered promiscuous mode [ 319.485694][ T7931] device hsr_slave_0 entered promiscuous mode [ 319.524039][ T7931] device hsr_slave_1 entered promiscuous mode [ 319.573466][ T7931] debugfs: Directory 'hsr0' with parent '/' already present! [ 319.584704][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.591699][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.618409][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.635045][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.659668][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.678341][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.711425][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.719050][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.728690][ T7933] team0: Port device team_slave_0 added [ 319.736074][ T7933] team0: Port device team_slave_1 added [ 319.795856][ T7929] device hsr_slave_0 entered promiscuous mode [ 319.843710][ T7929] device hsr_slave_1 entered promiscuous mode [ 319.893507][ T7929] debugfs: Directory 'hsr0' with parent '/' already present! [ 319.914833][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.923190][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.940215][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.976624][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.987588][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.998256][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.024783][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.035892][ T7925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.100715][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.109754][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.122703][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.130145][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.146869][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.157369][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.184815][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.196184][ T7925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.247153][ T7925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.315380][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.325382][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.334164][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.342726][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.350128][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.358477][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.368153][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.397151][ T7925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.448427][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.457605][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.485165][ T7922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.495801][ T7922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.513154][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.522050][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.530812][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.539417][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.548774][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.557364][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.566033][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.574812][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.583680][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.592266][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.645557][ T7933] device hsr_slave_0 entered promiscuous mode [ 320.683810][ T7933] device hsr_slave_1 entered promiscuous mode [ 320.723455][ T7933] debugfs: Directory 'hsr0' with parent '/' already present! [ 320.744023][ T7917] device veth0_vlan entered promiscuous mode [ 320.758803][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.767252][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.778992][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.787515][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.812916][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.820545][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.828770][ T7931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.891169][ T7929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.935332][ T7929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.986975][ T7929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.056037][ T7929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.115529][ T7931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.174256][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.198481][ T7931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.287338][ T7917] device veth1_vlan entered promiscuous mode [ 321.314360][ T7931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.346919][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.355727][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.376505][ T7917] device veth0_macvtap entered promiscuous mode [ 321.385066][ T7933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.423506][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.432642][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.445594][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.471470][ T7933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.522910][ T7933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.576339][ T7917] device veth1_macvtap entered promiscuous mode [ 321.598691][ T7933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.681401][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.691310][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.700377][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.708851][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.717234][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.725971][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.735430][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.745663][ T7922] device veth0_vlan entered promiscuous mode [ 321.768872][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.776752][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.785396][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.793739][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.803581][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.818797][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.838950][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.848340][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.857886][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.867023][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.875649][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.882831][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.891786][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.906359][ T7922] device veth1_vlan entered promiscuous mode [ 321.936114][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.959774][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.976795][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 09:50:49 executing program 0: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xcbc3, 0x7, 0x6, 0x23ad}]}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 321.989220][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.996391][ T7940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.004921][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.014215][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.024357][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.033265][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.042833][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.052076][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.078299][ T7925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.092630][ T7925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.112307][ T7929] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.121631][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.131995][ T7949] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 322.134066][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.161365][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.170385][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.178964][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.187572][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.195464][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.206277][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.228283][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.240163][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.248445][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.259675][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.273527][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.282191][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.297407][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.319298][ T7922] device veth0_macvtap entered promiscuous mode [ 322.333811][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.342653][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.355633][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.366965][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.374179][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.382403][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.395812][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.404521][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.412576][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.420495][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.430650][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.440283][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 09:50:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) [ 322.449011][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.458255][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.472521][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.485733][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.509184][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.521770][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.533916][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.543153][ T7922] device veth1_macvtap entered promiscuous mode [ 322.561963][ T7925] device veth0_vlan entered promiscuous mode [ 322.578131][ T7929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.589876][ T7929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.615981][ T7933] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.626276][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.634558][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.642894][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.652167][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.660916][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.669856][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.678678][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.687708][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.698326][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.707541][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.717260][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.725949][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.736318][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.745110][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.752279][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.762587][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.772268][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.780797][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.787942][ T7934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.796680][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.807015][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.817055][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.825874][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.835994][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.846378][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.854503][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.863155][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.871202][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.879980][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.898376][ T7925] device veth1_vlan entered promiscuous mode [ 322.921072][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.933625][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.946637][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.955779][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.966384][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.976298][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.986059][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.994692][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.003223][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.011708][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.020273][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.028853][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.037596][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.046184][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.053282][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.061227][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.070133][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.079755][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.092017][ T7931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.107928][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.128553][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.137434][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.148422][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.159489][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.167594][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.176417][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.185318][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.192761][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.200667][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.210273][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.220674][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 09:50:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) [ 323.230008][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.271566][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.293336][ T7933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.304436][ T7933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.334574][ T7925] device veth0_macvtap entered promiscuous mode [ 323.342491][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.353992][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.361649][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.370519][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.379261][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.388426][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.397384][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.407962][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.417109][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.428677][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.437729][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.448974][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.458463][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.467436][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.476107][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.484546][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.492284][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.518523][ T7925] device veth1_macvtap entered promiscuous mode [ 323.546447][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.554478][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.562457][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.570341][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.578845][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.589997][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.605172][ T7929] device veth0_vlan entered promiscuous mode [ 323.613081][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.630656][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.649359][ T7929] device veth1_vlan entered promiscuous mode [ 323.659801][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.698986][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:50:51 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, 0x0, 0x0) [ 323.721167][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.731858][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.752718][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_0 09:50:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f0e6588b967481241ba7868f1eaf65ac618ded8974895abea68b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) [ 323.781543][ T7929] device veth0_macvtap entered promiscuous mode [ 323.836655][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.854154][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:50:51 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 323.880301][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.892468][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.901431][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.910256][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.918994][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.927893][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.947742][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.972183][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.982177][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.994054][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.005445][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.014741][ T7929] device veth1_macvtap entered promiscuous mode [ 324.026943][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.044390][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.053024][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.095984][ T7931] device veth0_vlan entered promiscuous mode [ 324.104035][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.112522][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.126736][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.134835][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.148777][ T7931] device veth1_vlan entered promiscuous mode [ 324.163134][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.184813][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.203424][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.224005][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.234278][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:50:52 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) epoll_create1(0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) rt_sigpending(&(0x7f0000000100), 0x8) creat(0x0, 0x0) syncfs(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000031c0)={@mcast2}, 0x0) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "c44b0b25401a"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1}}, {{&(0x7f0000003240)=@xdp, 0x80, 0x0}}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) write(r1, &(0x7f0000000040)="1ae06379ab4c64f883c99fce23", 0xd) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r3) [ 324.248956][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.262592][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.321883][ T7931] device veth0_macvtap entered promiscuous mode [ 324.337021][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.399349][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.417232][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.433973][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 09:50:52 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') [ 324.451635][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.452369][ C1] hrtimer: interrupt took 24632 ns [ 324.465974][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.506526][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.522930][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.537843][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.553108][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.579209][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.590703][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:50:52 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) epoll_create1(0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) rt_sigpending(&(0x7f0000000100), 0x8) creat(0x0, 0x0) syncfs(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000031c0)={@mcast2}, 0x0) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "c44b0b25401a"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1}}, {{&(0x7f0000003240)=@xdp, 0x80, 0x0}}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) write(r1, &(0x7f0000000040)="1ae06379ab4c64f883c99fce23", 0xd) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r3) [ 324.600829][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.611511][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.650084][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.668497][ T7931] device veth1_macvtap entered promiscuous mode [ 324.701580][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.711728][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.726377][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.735870][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.748413][ T7933] device veth0_vlan entered promiscuous mode [ 324.789497][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.810846][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.835628][ T7933] device veth1_vlan entered promiscuous mode [ 324.850836][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.859695][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.871364][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.881032][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.905067][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.917889][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.928615][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.941744][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.953950][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.966546][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.977120][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.988739][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.010002][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.019130][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.029244][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.041015][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.052555][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.065001][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.077412][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.089288][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.099394][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.110254][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.113588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.121657][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.125877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 325.146689][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.155541][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.169776][ T7933] device veth0_macvtap entered promiscuous mode [ 325.179355][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.188701][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.197928][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.209496][ T7933] device veth1_macvtap entered promiscuous mode 09:50:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) [ 325.239766][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.251377][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.266436][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.280931][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.293120][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.306775][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.317216][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.330470][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.341073][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 325.352266][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.363904][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.387810][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.396416][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.414015][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.424163][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.436538][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.448200][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.460564][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.471703][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.484134][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.496040][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.509039][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.520683][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 325.532117][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.543732][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.558549][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.574169][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:50:53 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x120, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x901, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 09:50:53 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) epoll_create1(0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) rt_sigpending(&(0x7f0000000100), 0x8) creat(0x0, 0x0) syncfs(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000031c0)={@mcast2}, 0x0) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "c44b0b25401a"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1}}, {{&(0x7f0000003240)=@xdp, 0x80, 0x0}}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) write(r1, &(0x7f0000000040)="1ae06379ab4c64f883c99fce23", 0xd) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r3) 09:50:53 executing program 3: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000300)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) dup(0xffffffffffffffff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:53 executing program 5: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000050000a94a7b000400000604000000000000000101000008002000030000000b000000ff0f000007000000ff0100"], &(0x7f00000000c0)=""/235, 0x46, 0xeb, 0x8}, 0x20) 09:50:53 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000040)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) 09:50:53 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)={0x0, 0x3f00}) 09:50:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xb2, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400ec0000000000000000000000000000000000b3fca97875e49b8a1959f37f20e48cc26b88b2742b3897576cac2867b33b6c8e9511489229428bf0a0d6a021de605d6a926502f207ade177f78ea55d7061d11786bb882fcdef638ba0a0ca6fe99c807b77b495244b9fb2ba128d48e6762521da19b7db4e93a5e2a8d169b96d653a1bd4d0d5251360eb65dbfa9d3919699d74916c4e5a1efe4a9d6d3560878ddc7af054ae498488325089efa1"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0xa}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 325.885815][ T8038] BPF:Invalid string section 09:50:53 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4071, &(0x7f0000001140)=0xfe7) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 09:50:53 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='gre0\x00') 09:50:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x30, 0x0, 0x0, 0xffffffff}]}, 0x10) 09:50:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setgid(0x0) write$FUSE_ENTRY(r0, &(0x7f00000001c0)={0x90, 0x0, 0x3, {0x1, 0x0, 0x0, 0x8000, 0xffffffff, 0x9, {0x3, 0x5, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0xafc6, 0xfffff14f, 0xfffffe01, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x10001}}}, 0x90) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') write(0xffffffffffffffff, &(0x7f00000003c0)='T', 0x1) 09:50:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0xd0, 0xd0, 0xd0, 0xd0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0xffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 09:50:54 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x540a, 0x0) 09:50:54 executing program 0: 09:50:54 executing program 1: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x200000011002, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x0, 0x0}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 326.431565][ T8075] SET target dimension over the limit! [ 326.468816][ T8079] SET target dimension over the limit! 09:50:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) close(r0) [ 326.533262][ T8077] overlayfs: filesystem on './file0' not supported as upperdir 09:50:54 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x6b00000000000000, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/237, 0x2b, 0xed, 0x8}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000050774000000dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000200050003000c0000000a000540020000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1becb85f7297cb072cd567309e4df2d41485c9b6a83c953a21aa4f22f55716d40a207530362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c425b32265056d7425271b24a7a00c7f44c83d98fd505c6a5bed", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f627927737456b54921f664921e1615264cc762c1897041559d7dc7e2109b0dff9eb9ca92da732cc5b460a46383502d39115895996c76ff3ce0392ed1257af1867305485dc560b67fa9950386e7d44374265b739aa0ef8918e45c58c6bc0a1dcfde97698dfe68efeb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09177280b0443767621957b58026d75a2af7545"], 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000050774000000dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b000200050003000c0000000a000540020000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1becb85f7297cb072cd567309e4df2d41485c9b6a83c953a21aa4f22f55716d40a207530362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c425b32265056d7425271b24a7a00c7f44c83d98fd505c6a5bed", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f627927737456b54921f664921e1615264cc762c1897041559d7dc7e2109b0dff9eb9ca92da732cc5b460a46383502d39115895996c76ff3ce0392ed1257af1867305485dc560b67fa9950386e7d44374265b739aa0ef8918e45c58c6bc0a1dcfde97698dfe68efeb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c09177280b0443767621957b58026d75a2af7545"], 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r0, r4, r5], 0x3) socket$netlink(0x10, 0x3, 0x0) getpid() 09:50:54 executing program 4: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xcbc3, 0x7, 0x6, 0x23ad}]}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 09:50:54 executing program 5: 09:50:54 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setgid(0x0) write$FUSE_ENTRY(r0, &(0x7f00000001c0)={0x90, 0x0, 0x3, {0x1, 0x0, 0x0, 0x8000, 0xffffffff, 0x9, {0x3, 0x5, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0xafc6, 0xfffff14f, 0xfffffe01, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x10001}}}, 0x90) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') write(0xffffffffffffffff, &(0x7f00000003c0)='T', 0x1) [ 326.750194][ T8093] BPF:[1] VAR _ [ 326.792397][ T8093] BPF:type_id=0 linkage=0 [ 326.804099][ T8093] BPF: [ 326.845813][ T8093] BPF:Invalid type_id [ 326.866913][ T8093] BPF: [ 326.866913][ T8093] 09:50:54 executing program 0: 09:50:54 executing program 1: [ 326.895721][ T8094] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 09:50:54 executing program 5: [ 327.113752][ T8094] device tunl0 entered promiscuous mode [ 327.136766][ T8094] device macsec1 entered promiscuous mode 09:50:54 executing program 4: [ 327.176473][ T8094] device tunl0 left promiscuous mode 09:50:54 executing program 1: 09:50:54 executing program 0: 09:50:54 executing program 3: 09:50:54 executing program 5: [ 327.537551][ T8093] BPF:[1] VAR _ [ 327.541255][ T8093] BPF:type_id=0 linkage=0 [ 327.550758][ T8104] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 327.581584][ T8093] BPF: [ 327.603224][ T8093] BPF:Invalid type_id [ 327.630767][ T8104] device tunl0 entered promiscuous mode [ 327.631663][ T8093] BPF: [ 327.631663][ T8093] [ 327.645414][ T8104] device macsec1 entered promiscuous mode [ 327.653181][ T8104] device tunl0 left promiscuous mode 09:50:55 executing program 2: 09:50:55 executing program 0: 09:50:55 executing program 1: 09:50:55 executing program 4: 09:50:55 executing program 3: 09:50:55 executing program 5: 09:50:55 executing program 0: 09:50:55 executing program 1: 09:50:55 executing program 3: 09:50:55 executing program 5: 09:50:55 executing program 4: 09:50:55 executing program 2: 09:50:55 executing program 1: 09:50:55 executing program 0: 09:50:55 executing program 3: 09:50:55 executing program 4: 09:50:56 executing program 5: 09:50:56 executing program 0: 09:50:56 executing program 2: 09:50:56 executing program 3: 09:50:56 executing program 1: 09:50:56 executing program 4: 09:50:56 executing program 5: 09:50:56 executing program 3: 09:50:56 executing program 0: 09:50:56 executing program 2: 09:50:56 executing program 1: 09:50:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) 09:50:56 executing program 0: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x200000011002, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xcbc3, 0x7, 0x6, 0x23ad}]}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 09:50:56 executing program 3: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000340), 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xcbc3, 0x7, 0x6, 0x23ad}]}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:50:56 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0x0, 0x3, {0x1, 0x0, 0x7, 0x8000, 0xffffffff, 0x9, {0x3, 0x5, 0x7, 0x9, 0x0, 0xfffffffffffffffe, 0xafc6, 0xfffff14f, 0xfffffe01, 0x4, 0x0, 0xffffffffffffffff, r0, 0x78, 0x10001}}}, 0x90) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0xc, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f00000001c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) 09:50:56 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) syz_open_dev$audion(&(0x7f0000001640)='/dev/audio#\x00', 0x6, 0x10202) r3 = getpid() syz_open_procfs(0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000480)='coredump_filter\x00') getgid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000001840)={0xf000000, 0x91d, 0x0, r5, 0x0, &(0x7f0000001800)={0x980903, 0x7, [], @string=&(0x7f00000017c0)=0x2}}) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = memfd_create(&(0x7f0000000000)='s{]\b\x00\x00\x00\xdd\xff\x00'/19, 0x0) lseek(r6, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getpgrp(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f40)={{{@in6, @in=@multicast1}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, &(0x7f0000001980)=0xe8) r10 = getpid() syz_open_procfs(r10, 0x0) syz_open_procfs(r10, &(0x7f0000000480)='coredump_filter\x00') socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) clone3(0x0, 0x0) r13 = clone3(&(0x7f0000000380)={0x3000300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) waitid(0x0, r13, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) 09:50:56 executing program 4: 09:50:56 executing program 1: [ 329.245460][ T8212] overlayfs: conflicting lowerdir path 09:50:57 executing program 5: 09:50:57 executing program 1: 09:50:57 executing program 3: 09:50:57 executing program 4: [ 329.360124][ T8231] overlayfs: workdir and upperdir must reside under the same mount 09:50:57 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0x0, 0x3, {0x1, 0x0, 0x7, 0x8000, 0xffffffff, 0x9, {0x3, 0x5, 0x7, 0x9, 0x0, 0xfffffffffffffffe, 0xafc6, 0xfffff14f, 0xfffffe01, 0x4, 0x0, 0xffffffffffffffff, r0, 0x78, 0x10001}}}, 0x90) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0xc, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f00000001c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) 09:50:57 executing program 5: 09:50:57 executing program 0: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x200000011002, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0xcbc3, 0x7, 0x6, 0x23ad}]}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 09:50:57 executing program 4: 09:50:57 executing program 1: 09:50:57 executing program 5: 09:50:57 executing program 4: 09:50:57 executing program 1: 09:50:57 executing program 3: [ 329.860480][ T8256] overlayfs: conflicting lowerdir path 09:50:57 executing program 3: 09:50:57 executing program 5: 09:50:57 executing program 1: 09:50:58 executing program 2: 09:50:58 executing program 4: 09:50:58 executing program 3: 09:50:58 executing program 1: 09:50:58 executing program 0: 09:50:58 executing program 5: 09:50:58 executing program 4: 09:50:58 executing program 2: 09:50:58 executing program 3: 09:50:58 executing program 5: 09:50:58 executing program 1: 09:50:58 executing program 0: 09:50:58 executing program 5: 09:50:58 executing program 2: 09:50:58 executing program 1: 09:50:58 executing program 4: 09:50:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7}, 0x7) 09:50:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:50:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_BT_SECURITY(r1, 0x12, 0x4, 0x0, 0x71a000) 09:50:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r3, 0x0, 0x19, &(0x7f00006ed000), &(0x7f0000000000)=0x3) 09:50:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00007e6000)={@local, @empty}, 0xc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) 09:50:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:50:59 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @broadcast}}) 09:50:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:50:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.449044][ T8342] IPVS: ftp: loaded support on port[0] = 21 09:50:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 09:50:59 executing program 5: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) write(r0, &(0x7f0000000180), 0x0) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49) 09:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0xffffffffffffff8b}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 331.637696][ T8334] loop2: p2 < > p3 p4 [ 331.670618][ T8351] kvm: emulating exchange as write [ 331.683435][ T8334] loop2: partition table partially beyond EOD, truncated [ 331.717374][ T8334] loop2: p2 size 2 extends beyond EOD, truncated [ 331.732381][ T8342] IPVS: ftp: loaded support on port[0] = 21 [ 331.769779][ T8334] loop2: p3 start 225 is beyond EOD, truncated [ 331.779234][ T8334] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 331.950510][ T8375] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.973809][ T8334] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 331.988980][ T2499] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.999919][ T2499] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.007240][ T8377] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 332.008627][ T2499] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.030665][ T2499] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.043356][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.054327][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.066560][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.077481][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.085752][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.096750][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.106270][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.117318][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.125575][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.137058][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.145274][ T2500] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.156178][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.164395][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 332.172560][ T2500] Buffer I/O error on dev loop2p4, logical block 0, async page read 09:51:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 09:51:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) 09:51:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') pread64(r2, 0x0, 0x300, 0x300) 09:51:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:51:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:51:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 332.591962][ T8395] loop2: p2 < > p3 p4 [ 332.652825][ T8395] loop2: partition table partially beyond EOD, truncated [ 332.718695][ T8395] loop2: p2 size 2 extends beyond EOD, truncated [ 332.730216][ T8395] loop2: p3 start 225 is beyond EOD, truncated [ 332.743895][ T8401] loop1: p2 < > p3 p4 [ 332.748217][ T8395] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 332.756494][ T8401] loop1: partition table partially beyond EOD, truncated [ 332.767261][ T8401] loop1: p2 size 2 extends beyond EOD, truncated [ 332.778981][ T8403] loop3: p2 < > p3 p4 [ 332.783218][ T8403] loop3: partition table partially beyond EOD, truncated [ 332.814345][ T8403] loop3: p2 size 2 extends beyond EOD, truncated [ 332.823989][ T8403] loop3: p3 start 225 is beyond EOD, truncated [ 332.840581][ T8401] loop1: p3 start 225 is beyond EOD, truncated [ 332.875849][ T8403] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 332.913492][ T8401] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 333.153672][ T8056] ================================================================== [ 333.161803][ T8056] BUG: KCSAN: data-race in __dentry_kill / d_alloc_parallel [ 333.169078][ T8056] [ 333.171407][ T8056] read to 0xffff88812523d780 of 4 bytes by task 7886 on cpu 1: [ 333.178957][ T8056] __dentry_kill+0x1be/0x3c0 [ 333.183575][ T8056] dput+0x3b5/0x750 [ 333.187393][ T8056] follow_managed+0x1eb/0x6f0 [ 333.192071][ T8056] walk_component+0x4ec/0xd90 [ 333.196752][ T8056] path_lookupat.isra.0+0x13a/0x5a0 [ 333.201973][ T8056] filename_lookup+0x145/0x2b0 [ 333.206738][ T8056] user_path_at_empty+0x4c/0x70 [ 333.211602][ T8056] do_readlinkat+0x84/0x220 [ 333.216104][ T8056] __x64_sys_readlink+0x51/0x70 [ 333.220956][ T8056] do_syscall_64+0xcc/0x3a0 [ 333.225471][ T8056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.231350][ T8056] [ 333.233684][ T8056] write to 0xffff88812523d780 of 4 bytes by task 8056 on cpu 0: [ 333.241482][ T8056] d_alloc_parallel+0x533/0xe00 [ 333.246339][ T8056] __lookup_slow+0xb4/0x2a0 [ 333.250951][ T8056] lookup_slow+0x4f/0x70 [ 333.255201][ T8056] walk_component+0x490/0xd90 [ 333.259924][ T8056] path_lookupat.isra.0+0x13a/0x5a0 [ 333.265233][ T8056] filename_lookup+0x145/0x2b0 [ 333.270105][ T8056] user_path_at_empty+0x4c/0x70 [ 333.274978][ T8056] do_readlinkat+0x84/0x220 [ 333.279633][ T8056] __x64_sys_readlink+0x51/0x70 [ 333.284495][ T8056] do_syscall_64+0xcc/0x3a0 [ 333.289104][ T8056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.294992][ T8056] [ 333.297319][ T8056] Reported by Kernel Concurrency Sanitizer on: [ 333.303484][ T8056] CPU: 0 PID: 8056 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 333.311408][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.321583][ T8056] ================================================================== [ 333.329651][ T8056] Kernel panic - not syncing: panic_on_warn set ... [ 333.336246][ T8056] CPU: 0 PID: 8056 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 333.344044][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.354100][ T8056] Call Trace: [ 333.357398][ T8056] dump_stack+0x11d/0x181 [ 333.361854][ T8056] panic+0x210/0x640 [ 333.365772][ T8056] ? vprintk_func+0x8d/0x140 [ 333.370553][ T8056] kcsan_report.cold+0xc/0xd [ 333.375349][ T8056] kcsan_setup_watchpoint+0x3fe/0x460 [ 333.380743][ T8056] __tsan_unaligned_write4+0xc7/0x110 [ 333.386138][ T8056] d_alloc_parallel+0x533/0xe00 [ 333.391098][ T8056] ? __d_free_external+0x60/0x60 [ 333.396046][ T8056] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 333.401963][ T8056] ? __read_once_size+0x5a/0xe0 [ 333.406830][ T8056] ? __rcu_read_unlock+0x66/0x3d0 [ 333.411888][ T8056] ? dput+0xab/0x750 [ 333.415804][ T8056] __lookup_slow+0xb4/0x2a0 [ 333.420425][ T8056] lookup_slow+0x4f/0x70 [ 333.424680][ T8056] walk_component+0x490/0xd90 [ 333.429369][ T8056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.435728][ T8056] ? link_path_walk.part.0+0x77f/0xa90 [ 333.441209][ T8056] path_lookupat.isra.0+0x13a/0x5a0 [ 333.446426][ T8056] ? _raw_spin_unlock+0x4b/0x60 [ 333.451308][ T8056] ? __read_once_size.constprop.0+0x12/0x20 [ 333.458714][ T8056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.465078][ T8056] filename_lookup+0x145/0x2b0 [ 333.469875][ T8056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.476141][ T8056] ? strncpy_from_user+0x219/0x2b0 [ 333.481486][ T8056] ? getname_flags+0x1a4/0x380 [ 333.487025][ T8056] user_path_at_empty+0x4c/0x70 [ 333.491970][ T8056] do_readlinkat+0x84/0x220 [ 333.496494][ T8056] ? __do_page_fault+0x2e9/0x8d0 [ 333.501615][ T8056] __x64_sys_readlink+0x51/0x70 [ 333.507168][ T8056] do_syscall_64+0xcc/0x3a0 [ 333.511681][ T8056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.517620][ T8056] RIP: 0033:0x7fb616a32577 [ 333.522050][ T8056] Code: f0 ff ff 77 02 f3 c3 48 8b 15 bd 38 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 38 2b 00 31 d2 48 29 c2 64 [ 333.541770][ T8056] RSP: 002b:00007ffc39a88968 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 333.550190][ T8056] RAX: ffffffffffffffda RBX: 000000000255d250 RCX: 00007fb616a32577 [ 333.558167][ T8056] RDX: 0000000000000400 RSI: 00007ffc39a88970 RDI: 00007ffc39a88e50 [ 333.566143][ T8056] RBP: 0000000002576930 R08: 7665642f7379732f R09: 7269762f73656369 [ 333.574115][ T8056] R10: 6f6c622f6c617574 R11: 0000000000000246 R12: 00007ffc39a88e50 [ 333.582081][ T8056] R13: 0000000000000400 R14: 000000000255d250 R15: 000000000000000b [ 333.591520][ T8056] Kernel Offset: disabled [ 333.595847][ T8056] Rebooting in 86400 seconds..