[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. 2020/05/16 13:47:51 fuzzer started 2020/05/16 13:47:51 dialing manager at 10.128.0.26:35939 2020/05/16 13:47:51 syscalls: 3005 2020/05/16 13:47:51 code coverage: enabled 2020/05/16 13:47:51 comparison tracing: enabled 2020/05/16 13:47:51 extra coverage: enabled 2020/05/16 13:47:51 setuid sandbox: enabled 2020/05/16 13:47:51 namespace sandbox: enabled 2020/05/16 13:47:51 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/16 13:47:51 fault injection: enabled 2020/05/16 13:47:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/16 13:47:51 net packet injection: enabled 2020/05/16 13:47:51 net device setup: enabled 2020/05/16 13:47:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/16 13:47:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/16 13:47:51 USB emulation: /dev/raw-gadget does not exist 13:51:26 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\x8c\xe1\x95\x90&\x06\xc8h\x13\xbe\x1c\xc1\xc0\xa3', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="49e7ff000000350000007f1215b0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syzkaller login: [ 270.626481][ T7023] IPVS: ftp: loaded support on port[0] = 21 13:51:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 270.778185][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 270.880756][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.902906][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.922911][ T7023] device bridge_slave_0 entered promiscuous mode [ 270.935598][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.954405][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.967812][ T7023] device bridge_slave_1 entered promiscuous mode [ 270.988640][ T7153] IPVS: ftp: loaded support on port[0] = 21 [ 271.025505][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 13:51:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000000206010000160000000000000000000011000300686173683a69702c706f72740000000005000400000000000900020073797a3100000000050005000a0000000500010006"], 0x78}}, 0x0) [ 271.052152][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.140406][ T7023] team0: Port device team_slave_0 added [ 271.164602][ T7023] team0: Port device team_slave_1 added [ 271.251313][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.259698][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.289064][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.329303][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.337889][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.366666][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.391902][ T7153] chnl_net:caif_netlink_parms(): no params data found 13:51:27 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 271.437280][ T7240] IPVS: ftp: loaded support on port[0] = 21 [ 271.486748][ T7023] device hsr_slave_0 entered promiscuous mode [ 271.544088][ T7023] device hsr_slave_1 entered promiscuous mode 13:51:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffffffffffffff49, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) [ 271.758957][ T7325] IPVS: ftp: loaded support on port[0] = 21 [ 271.848968][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.864873][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.893671][ T7153] device bridge_slave_0 entered promiscuous mode [ 271.937655][ T7359] IPVS: ftp: loaded support on port[0] = 21 [ 271.954094][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.970452][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.978868][ T7153] device bridge_slave_1 entered promiscuous mode [ 272.187881][ T7153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 13:51:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x9, 0x0, 0x0, 0x204, 0x0, 0x4, 0x6, 0x1]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @dev, 0x2}, {0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) [ 272.238068][ T7240] chnl_net:caif_netlink_parms(): no params data found [ 272.265002][ T7153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.417571][ T7153] team0: Port device team_slave_0 added [ 272.426872][ T7153] team0: Port device team_slave_1 added [ 272.476389][ T7023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.553738][ T7023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.591498][ T7534] IPVS: ftp: loaded support on port[0] = 21 [ 272.611422][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.619277][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.646861][ T7153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.661408][ T7153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.669344][ T7153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.698507][ T7153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.711241][ T7023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.759753][ T7023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.834750][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 272.892341][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.899818][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.909124][ T7240] device bridge_slave_0 entered promiscuous mode [ 272.919466][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.928455][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.937099][ T7240] device bridge_slave_1 entered promiscuous mode [ 272.998768][ T7153] device hsr_slave_0 entered promiscuous mode [ 273.042906][ T7153] device hsr_slave_1 entered promiscuous mode [ 273.102733][ T7153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.110516][ T7153] Cannot create hsr debugfs directory [ 273.118070][ T7359] chnl_net:caif_netlink_parms(): no params data found [ 273.178079][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.226792][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.281065][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.290064][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.299070][ T7325] device bridge_slave_0 entered promiscuous mode [ 273.320560][ T7240] team0: Port device team_slave_0 added [ 273.354630][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.361719][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.373360][ T7325] device bridge_slave_1 entered promiscuous mode [ 273.381722][ T7240] team0: Port device team_slave_1 added [ 273.406628][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.416751][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.425707][ T7359] device bridge_slave_0 entered promiscuous mode [ 273.471000][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.478242][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.488153][ T7359] device bridge_slave_1 entered promiscuous mode [ 273.510942][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.521955][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.529002][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.556256][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.598501][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.624138][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.631115][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.658303][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.697209][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.710609][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.724364][ T7325] team0: Port device team_slave_0 added [ 273.776886][ T7325] team0: Port device team_slave_1 added [ 273.824381][ T7359] team0: Port device team_slave_0 added [ 273.871889][ T7153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.927342][ T7240] device hsr_slave_0 entered promiscuous mode [ 274.003017][ T7240] device hsr_slave_1 entered promiscuous mode [ 274.102622][ T7240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.110276][ T7240] Cannot create hsr debugfs directory [ 274.117939][ T7359] team0: Port device team_slave_1 added [ 274.124886][ T7534] chnl_net:caif_netlink_parms(): no params data found [ 274.136976][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.145307][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.172919][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.190678][ T7153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.249654][ T7153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.341666][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.349249][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.376400][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.396584][ T7153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.467195][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.476104][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.504997][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.518587][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.526633][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.556868][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.706972][ T7325] device hsr_slave_0 entered promiscuous mode [ 274.752898][ T7325] device hsr_slave_1 entered promiscuous mode [ 274.812462][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.820064][ T7325] Cannot create hsr debugfs directory [ 274.860278][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.881289][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.890607][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.899814][ T7534] device bridge_slave_0 entered promiscuous mode [ 274.956073][ T7359] device hsr_slave_0 entered promiscuous mode [ 275.002890][ T7359] device hsr_slave_1 entered promiscuous mode [ 275.053371][ T7359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.060942][ T7359] Cannot create hsr debugfs directory [ 275.083791][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.090870][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.100066][ T7534] device bridge_slave_1 entered promiscuous mode [ 275.155209][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.167970][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.229699][ T7534] team0: Port device team_slave_0 added [ 275.247112][ T7534] team0: Port device team_slave_1 added [ 275.275796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.291273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.305733][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.340800][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.351375][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.383093][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.415042][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.422015][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.449969][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.505959][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.517419][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.529145][ T4003] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.536552][ T4003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.549547][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.558906][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.567665][ T4003] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.574821][ T4003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.583441][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.608618][ T7240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.657447][ T7240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.741226][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.749533][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.773134][ T7240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.837265][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.846845][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.855942][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.865744][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.876586][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.885248][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.893981][ T7240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.016016][ T7534] device hsr_slave_0 entered promiscuous mode [ 276.072701][ T7534] device hsr_slave_1 entered promiscuous mode [ 276.123838][ T7534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.131540][ T7534] Cannot create hsr debugfs directory [ 276.157563][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.170260][ T7023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.180587][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.190699][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.204725][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.243786][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.287958][ T7325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.345802][ T7325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.405118][ T7325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.467981][ T7325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.581813][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.595550][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.605023][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.614291][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.640140][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.666487][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.727118][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.736476][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.746347][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.753495][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.761065][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.770180][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.779133][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.786289][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.794538][ T7359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.862277][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.877772][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.886946][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.896847][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.907824][ T7359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.975483][ T7359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.072330][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.093049][ T7359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.150139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.160779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.171254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.181073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.190878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.200286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.211503][ T7023] device veth0_vlan entered promiscuous mode [ 277.238220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.246959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.255574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.263933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.272751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.292415][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.301406][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.319876][ T7023] device veth1_vlan entered promiscuous mode [ 277.336242][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.348171][ T7534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.408848][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.441099][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.450043][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.465347][ T7534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.529564][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.545261][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.554074][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.561943][ T7534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.643818][ T7534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.721689][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.735472][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.749232][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.758808][ T4003] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.766024][ T4003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.774181][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.783681][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.792820][ T4003] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.799884][ T4003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.808194][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.817281][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.828465][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.853039][ T7023] device veth0_macvtap entered promiscuous mode [ 277.877674][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.887392][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.898614][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.918080][ T7023] device veth1_macvtap entered promiscuous mode [ 277.929010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.939595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.948894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.958926][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.967063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.975637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.992976][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.020422][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.033665][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.041434][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.051387][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.061085][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.070257][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.077426][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.117934][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.127241][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.140137][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.150398][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.160068][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.169057][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.176275][ T2739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.185212][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.195331][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.231124][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.261652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.270632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.280386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.290533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.299524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.312538][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.325769][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.372854][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.387945][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.399154][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.408474][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.417549][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.426519][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.435529][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.444773][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.453313][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.496181][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.509679][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.518476][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.528629][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.539259][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.548380][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.577664][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.631325][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.641452][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.653794][ T7153] device veth0_vlan entered promiscuous mode [ 278.662801][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.670560][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.687842][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.739574][ T7359] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.824143][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.833516][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.846533][ T7153] device veth1_vlan entered promiscuous mode [ 278.888380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.899529][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.910331][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.919899][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.927072][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.938601][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.949073][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.958509][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.965757][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.991431][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.050939][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.068815][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.079548][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.089582][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.097667][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.108903][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.132727][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.140671][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.163594][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.171101][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.201811][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.239566][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.250157][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.262866][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.271550][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:51:35 executing program 0: [ 279.282230][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.290959][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.301142][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.319282][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.326456][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.351474][ T7153] device veth0_macvtap entered promiscuous mode 13:51:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) creat(0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syncfs(r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 279.397931][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.410007][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.419591][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.429060][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.438963][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.450111][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.460023][ T2739] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.467180][ T2739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.490680][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.499905][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.510114][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.520543][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.530595][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.543436][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.561818][ C1] hrtimer: interrupt took 47380 ns [ 279.622418][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.682579][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.691586][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.703680][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.717513][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.726043][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.747141][ T7153] device veth1_macvtap entered promiscuous mode [ 279.766255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.775515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 13:51:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x3) 13:51:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000019007faf37c083b2a4a280930a000310000243dc900523693900090010000004000000000800050000000000080000000004d5440a009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 279.855078][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.864037][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.898806][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.922838][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.952382][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.998948][ T7325] device veth0_vlan entered promiscuous mode [ 280.027919][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.040936][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.054809][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.063993][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.080207][ T7240] device veth0_vlan entered promiscuous mode [ 280.104134][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.116401][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.130576][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_0 13:51:36 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000640)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) [ 280.149797][ T7325] device veth1_vlan entered promiscuous mode [ 280.160829][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.182441][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.190359][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.200027][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.209925][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.219443][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.227996][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.236535][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.246429][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.259006][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.271930][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.289824][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.305288][ T7153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.323663][ T7153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.344885][ T7153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.380098][ T7240] device veth1_vlan entered promiscuous mode [ 280.388828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.399401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.408886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:51:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000640)=""/4093, 0xffd}, {&(0x7f0000000080)=""/35, 0x23}, {0x0}, {0x0}], 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004780), 0x0) getresgid(&(0x7f0000004800), &(0x7f0000004840), &(0x7f0000004880)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000600)="4679c8b089edadee01d19a443bfc7ef6dd29ed6d1badaba171", 0x19}, {&(0x7f0000003640)="ded7318b71d7", 0x6}], 0x5}, 0x20004000) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 280.510719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.522969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.531263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.556708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.628667][ T7534] 8021q: adding VLAN 0 to HW filter on device batadv0 13:51:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14f000}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) [ 280.774477][ T7325] device veth0_macvtap entered promiscuous mode [ 280.787376][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.800196][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.821030][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.847975][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.874764][ T7240] device veth0_macvtap entered promiscuous mode [ 280.903566][ T7325] device veth1_macvtap entered promiscuous mode [ 280.923464][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.938014][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.947981][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.959863][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 13:51:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 281.000385][ T7240] device veth1_macvtap entered promiscuous mode [ 281.032752][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.068138][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.078809][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.090238][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.108516][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.134951][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.146406][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.157381][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.168892][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.178601][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.187157][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.199940][ T7359] device veth0_vlan entered promiscuous mode [ 281.213987][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.235633][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.254168][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.265304][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.279782][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.290424][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.303954][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.314577][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.326714][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.338388][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.348896][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.360371][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.377641][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.386497][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.399756][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.409946][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.427128][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.438436][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.457597][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.468109][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.478145][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.489201][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.500804][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.521311][ T7359] device veth1_vlan entered promiscuous mode [ 281.528792][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.538263][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.547677][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.756347][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.766549][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.776497][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.909631][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.932565][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.947502][ T7359] device veth0_macvtap entered promiscuous mode [ 281.972965][ T8350] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.998842][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.016412][ T7359] device veth1_macvtap entered promiscuous mode 13:51:38 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)=0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) 13:51:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 282.070349][ T7534] device veth0_vlan entered promiscuous mode [ 282.080330][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.097684][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.110261][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.126179][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.151448][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.173451][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.191495][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.210796][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.229587][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.240222][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.250365][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.260989][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.274352][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.304735][ T7534] device veth1_vlan entered promiscuous mode [ 282.320943][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.329898][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.340881][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.367317][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 282.393935][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.409418][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 282.427831][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.438323][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 282.449950][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.460076][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 282.470919][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.483237][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.516235][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.525221][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.534751][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.569499][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.583376][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.630001][ T7534] device veth0_macvtap entered promiscuous mode [ 282.648688][ T7534] device veth1_macvtap entered promiscuous mode [ 282.782055][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.792928][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.804570][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.831540][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.841378][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.869100][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.871550][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.891060][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.902967][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.920471][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.941237][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.958116][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.977178][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 13:51:39 executing program 4: keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 282.987994][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.000862][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.013463][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.023856][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.035398][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.050966][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.062758][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.074185][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.085590][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.098915][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.108248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.124678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.141914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.160664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.170603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.192842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.507998][ T8388] IPVS: ftp: loaded support on port[0] = 21 [ 283.596580][ T8388] IPVS: ftp: loaded support on port[0] = 21 13:51:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000001c0)='eth0vmnet1\'vmnet0vboxnet1@\x00', 0x40, 0x0, &(0x7f0000000200)={0x3, 0xffff, 0x9}) 13:51:40 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/route\x00') readv(r0, &(0x7f0000001100)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) 13:51:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x11) 13:51:40 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000026000b0f", @ANYBLOB], 0x38}}, 0x0) 13:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() tkill(0x0, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syncfs(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(0xffffffffffffffff, 0x0, 0x0) 13:51:40 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)=0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) [ 283.733029][ T21] tipc: TX() has been purged, node left! [ 283.787128][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:51:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}]}, 0x4) 13:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() tkill(0x0, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syncfs(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 283.968873][ T8459] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:51:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x16}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 13:51:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x228, 0x17c, 0x17c, 0x123, 0x5, 0x228, 0x260, 0x260, 0x228, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x108, 0x140, 0x52020000, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 13:51:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000000000020102000000000000010000040000000200000000020000000b000000003000e299680032870b80ebcc6536a877536e1c01c6ee9661032bc6949cb297b80a25a129d7ee5b12e7b1297584b27c6ab8f24b74cd924019aca3b80333abb3b9c4cb95cfcf4f1c3425a1a97b82c1f7dde00046256e1b0a321f679d2a0bbb13ccef4a5b48b655461e366d640f91d2337ad24eeb64fcc00ee9fa18b0471ac00591ff00349fbf34b14ea130b87fac912930ee57cf9bab5e08268720e90a3be372166613945bb6638540ecf4307c1a735c9fa9c5ed886b396c0071a4c9b3dc72e6a0d71f9cbce8a20d69be392a56e3d13509b18820f8a5b3eec7847fffdc5df0158055fdb5"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x24) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000300)) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() [ 284.184321][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.256024][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 13:51:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 13:51:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() tkill(0x0, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syncfs(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 284.299989][ T8478] Cannot find add_set index 0 as target [ 284.323921][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 13:51:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() 13:51:40 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x1a) [ 284.499934][ T26] audit: type=1800 audit(1589637100.890:2): pid=8485 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 13:51:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000300)) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:41 executing program 2: clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:51:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() tkill(0x0, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syncfs(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(0xffffffffffffffff, 0x0, 0x0) 13:51:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000060400000000000000020000020100000000000000010000040000000200000000020000000b000000003000e299680032870b80ebcc6536a877536e1c01c6ee9661032bc6949cb297b80a25a129d7ee5b12e7b1297584b27c6ab8f24b74cd924019aca3b80333abb3b9c4cb95cfcf4f1c3425a1a97b82c1f7dde00046256e1b0a321f679d2a0bbb13ccef4a5b48b655461e366d640f91d2337ad24eeb64fcc00ee9fa18b0471ac00591ff00349fbf34b14ea130b87fac912930ee57cf9bab5e08268720e90a3be372166613945bb6638540ecf4307c1a735c9fa9c5ed886b396c0071a4c9b3dc72e6a0d71f9cbce8a20d69be392a56e3d13509b18820f8a5b3eec7847f"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:41 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="429a"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:51:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={0x0, 0x0, 0x4f}, 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:41 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x1a) [ 284.860182][ T26] audit: type=1800 audit(1589637101.240:3): pid=8513 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 [ 284.979167][ T8524] BPF:[2] PTR (anon) [ 285.014661][ T8524] BPF:type_id=1 [ 285.027603][ T8524] BPF: 13:51:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000300)) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() [ 285.059484][ T8524] BPF:vlen != 0 [ 285.077410][ T8532] BPF:[2] PTR (anon) 13:51:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003300)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x4000084}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 285.102520][ T8524] BPF: [ 285.102520][ T8524] [ 285.105487][ T8532] BPF:type_id=1 [ 285.109155][ T26] audit: type=1800 audit(1589637101.500:4): pid=8535 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 285.117754][ T8532] BPF: 13:51:41 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:51:41 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000440)={0x8}, 0x0, 0x0) 13:51:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x401070c9, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 285.221534][ T8532] BPF:vlen != 0 [ 285.234521][ T8532] BPF: [ 285.234521][ T8532] 13:51:41 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x1d}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:51:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() [ 285.263253][ T26] audit: type=1800 audit(1589637101.660:5): pid=8543 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 [ 285.311989][ T8545] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.369133][ T8555] ptrace attach of "/root/syz-executor.5"[8552] was attempted by "/root/syz-executor.5"[8555] 13:51:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_init() [ 285.455836][ T8556] BPF:[2] PTR (anon) 13:51:41 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000440)={0x8}, 0x0, 0x0) [ 285.483047][ T8556] BPF:type_id=1 13:51:41 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x16d}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 13:51:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x80000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'io'}, {0x0, 'memory'}]}, 0xc) [ 285.503183][ T8556] BPF: [ 285.516648][ T8556] BPF:vlen != 0 [ 285.535141][ T8556] BPF: [ 285.535141][ T8556] 13:51:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 285.578704][ T8576] ptrace attach of "/root/syz-executor.0"[8575] was attempted by "/root/syz-executor.0"[8576] 13:51:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 13:51:42 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="669a"], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:51:42 executing program 2: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:51:42 executing program 3: 13:51:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x258) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'io'}, {0x2d, 'memory'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x22) [ 285.745428][ T8584] overlayfs: filesystem on './file0' not supported 13:51:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:42 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00$\x00\v\r\x00'/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009001c006772656400000000140002"], 0x44}}, 0x0) [ 285.907060][ T26] audit: type=1804 audit(1589637102.300:6): pid=8596 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir681037681/syzkaller.NzaYoS/6/bus" dev="sda1" ino=15788 res=1 13:51:42 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="669a"], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 286.053509][ T8612] BPF:[1] FUNC (anon) [ 286.068331][ T8612] BPF:type_id=4 [ 286.074283][ T8612] BPF: [ 286.077777][ T8612] BPF:Invalid name [ 286.081700][ T26] audit: type=1800 audit(1589637102.470:7): pid=8616 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 13:51:42 executing program 5: symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000380)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x3fffffffffffe66, 0x0) [ 286.101692][ T8612] BPF: [ 286.101692][ T8612] 13:51:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 286.164721][ T8613] overlayfs: filesystem on './file0' not supported 13:51:42 executing program 3: 13:51:42 executing program 4: 13:51:42 executing program 5: [ 286.557820][ T8636] overlayfs: filesystem on './file0' not supported [ 286.611699][ T26] audit: type=1804 audit(1589637103.000:8): pid=8599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir681037681/syzkaller.NzaYoS/6/bus" dev="sda1" ino=15788 res=1 13:51:43 executing program 2: 13:51:43 executing program 5: 13:51:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x100000000, 0x80000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'io'}]}, 0x4) 13:51:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="669a"], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:51:43 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 13:51:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 286.716800][ T26] audit: type=1804 audit(1589637103.080:9): pid=8599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir681037681/syzkaller.NzaYoS/6/bus" dev="sda1" ino=15788 res=1 13:51:43 executing program 5: [ 286.992695][ T8657] overlayfs: filesystem on './file0' not supported 13:51:43 executing program 4: 13:51:43 executing program 2: 13:51:43 executing program 3: 13:51:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:43 executing program 4: 13:51:43 executing program 5: 13:51:43 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="669a"], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:51:43 executing program 3: 13:51:43 executing program 2: 13:51:43 executing program 4: 13:51:43 executing program 2: 13:51:43 executing program 3: 13:51:43 executing program 5: 13:51:43 executing program 3: 13:51:43 executing program 3: 13:51:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:43 executing program 4: 13:51:43 executing program 2: 13:51:44 executing program 1: 13:51:44 executing program 5: 13:51:44 executing program 3: 13:51:44 executing program 5: 13:51:44 executing program 2: 13:51:44 executing program 4: 13:51:44 executing program 3: 13:51:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:44 executing program 1: 13:51:44 executing program 5: 13:51:44 executing program 1: 13:51:44 executing program 2: 13:51:44 executing program 4: 13:51:44 executing program 1: 13:51:44 executing program 4: 13:51:44 executing program 3: 13:51:44 executing program 1: 13:51:44 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:44 executing program 2: 13:51:44 executing program 5: 13:51:44 executing program 1: 13:51:44 executing program 3: 13:51:44 executing program 5: 13:51:44 executing program 4: 13:51:44 executing program 2: [ 288.273027][ T8725] overlayfs: failed to resolve './file0': -2 13:51:44 executing program 1: 13:51:44 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:44 executing program 5: 13:51:44 executing program 3: 13:51:44 executing program 4: 13:51:44 executing program 1: 13:51:44 executing program 2: [ 288.475096][ T8734] overlayfs: failed to resolve './file0': -2 13:51:44 executing program 3: 13:51:44 executing program 5: 13:51:45 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:45 executing program 1: 13:51:45 executing program 4: 13:51:45 executing program 2: 13:51:45 executing program 5: 13:51:45 executing program 3: [ 288.736007][ T8746] overlayfs: failed to resolve './file0': -2 13:51:45 executing program 4: 13:51:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x24) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:45 executing program 1: 13:51:45 executing program 3: 13:51:45 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:45 executing program 5: 13:51:45 executing program 4: 13:51:45 executing program 3: 13:51:45 executing program 1: [ 289.019310][ T8754] BPF:[2] PTR (anon) [ 289.037401][ T8754] BPF:type_id=1 [ 289.051919][ T8754] BPF: 13:51:45 executing program 5: 13:51:45 executing program 4: [ 289.082420][ T8754] BPF:vlen != 0 [ 289.085990][ T8754] BPF: [ 289.085990][ T8754] 13:51:45 executing program 3: 13:51:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x24) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() [ 289.150843][ T8755] BPF:[2] PTR (anon) [ 289.155332][ T8755] BPF:type_id=1 [ 289.159168][ T8755] BPF: 13:51:45 executing program 1: [ 289.213036][ T8774] overlayfs: failed to resolve './file1': -2 [ 289.222746][ T8755] BPF:vlen != 0 [ 289.252036][ T8755] BPF: [ 289.252036][ T8755] 13:51:45 executing program 5: 13:51:45 executing program 4: 13:51:45 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000007000000000000000000000604000000000000000b0000020100000000000000010000040000000200000000020000000b000000003000e299680032870b80ebcc6536a877536e1c01c6ee9661032bc6949cb297b80a25a129d7ee5b12e7b1297584b27c6ab8f24b74cd924019aca3b80333abb3b9c4cb95cfcf4f1c3425a1a97b82c1f7dde00046256e1b0a321f679d2a0bbb13ccef4a5b48b655461e366d640f91d2337ad24eeb64fcc00ee9fa18b0471ac00591ff00349fbf34b14ea130b87fac912930ee57cf9bab5e08268720e90a3be372166613945bb6638540ecf4307c1a735c9fa9c5ed886b396c0071a4c9b3dc72e6a0d71f9cbce8a20d69be392a56e3d13509b18820f8a5b3eec7847fffdc5df0158055fdb5"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x24) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) inotify_init() 13:51:45 executing program 3: [ 289.357568][ T8782] BPF:[2] PTR (anon) [ 289.369631][ T8782] BPF:type_id=1 [ 289.383561][ T8782] BPF: [ 289.386352][ T8782] BPF:vlen != 0 [ 289.389822][ T8782] BPF: [ 289.389822][ T8782] 13:51:45 executing program 1: 13:51:45 executing program 5: 13:51:45 executing program 4: 13:51:45 executing program 3: [ 289.534998][ T8788] BPF:[2] PTR (anon) [ 289.565060][ T8788] BPF:type_id=1 [ 289.584271][ T8788] BPF: [ 289.602612][ T8788] BPF:vlen != 0 13:51:46 executing program 5: 13:51:46 executing program 1: [ 289.654076][ T8788] BPF: [ 289.654076][ T8788] [ 289.667767][ T8802] overlayfs: failed to resolve './file1': -2 13:51:46 executing program 4: 13:51:46 executing program 5: 13:51:46 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:46 executing program 3: 13:51:46 executing program 2: 13:51:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 13:51:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$usbfs(r0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 13:51:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 13:51:46 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 13:51:46 executing program 2: 13:51:46 executing program 4: [ 290.103145][ T8814] overlayfs: failed to resolve './file1': -2 13:51:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:46 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x37c, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r2, r1) 13:51:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup(0xffffffffffffffff) read$usbfs(r0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 13:51:46 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd3832f9b1577def13cdad6b8df14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003"], 0xac}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800}, 0x0) 13:51:46 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\x00'}) [ 290.397031][ T8841] overlayfs: failed to resolve './file0': -2 [ 290.407895][ T8848] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.425891][ T8851] ptrace attach of "/root/syz-executor.5"[8847] was attempted by "/root/syz-executor.5"[8851] 13:51:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9c4b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(0x0) [ 290.450709][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.493564][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.547775][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.572944][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.591487][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:51:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0) 13:51:47 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 13:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 13:51:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 13:51:47 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x0, 0x2, 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000040c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}], 0x3, 0x200000d0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4b47, 0x0) 13:51:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) [ 290.896162][ T8867] ------------[ cut here ]------------ [ 290.910620][ T8868] ------------[ cut here ]------------ 13:51:47 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) [ 290.940207][ T8876] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 290.942632][ T8867] memtype_reserve failed: [mem 0xffffffffff000-0x00000fff], req write-back [ 290.965825][ T8868] memtype_reserve failed: [mem 0xffffffffff000-0x00000fff], req write-back [ 290.975034][ T8869] overlayfs: failed to resolve './file0': -2 [ 291.010244][ T8868] WARNING: CPU: 0 PID: 8868 at arch/x86/mm/pat/memtype.c:589 memtype_reserve+0x69f/0x820 [ 291.020348][ T8868] Kernel panic - not syncing: panic_on_warn set ... [ 291.026943][ T8868] CPU: 0 PID: 8868 Comm: syz-executor.2 Not tainted 5.7.0-rc5-syzkaller #0 [ 291.027080][ T8867] WARNING: CPU: 1 PID: 8867 at arch/x86/mm/pat/memtype.c:589 memtype_reserve+0x69f/0x820 [ 291.035532][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.045328][ T8867] Modules linked in: [ 291.055376][ T8868] Call Trace: [ 291.059260][ T8867] CPU: 1 PID: 8867 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 291.062623][ T8868] dump_stack+0x188/0x20d [ 291.071277][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.075678][ T8868] ? memtype_reserve+0x5b0/0x820 [ 291.085711][ T8867] RIP: 0010:memtype_reserve+0x69f/0x820 [ 291.090720][ T8868] panic+0x2e3/0x75c [ 291.096142][ T8867] Code: 48 8b 2c ed 80 ff 28 88 e8 ae ae 3e 00 48 8d 4b ff 49 89 e8 4c 89 e2 48 c7 c6 e0 ff 28 88 48 c7 c7 40 f8 28 88 e8 79 e8 0f 00 <0f> 0b 41 bf ea ff ff ff e9 03 fc ff ff 41 bf ea ff ff ff e9 f8 fb [ 291.100014][ T8868] ? add_taint.cold+0x16/0x16 [ 291.119608][ T8867] RSP: 0018:ffffc90007a877a0 EFLAGS: 00010282 [ 291.124319][ T8868] ? __probe_kernel_read+0x188/0x1d0 [ 291.130674][ T8867] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000000 [ 291.136040][ T8868] ? __warn.cold+0x14/0x35 [ 291.143973][ T8867] RDX: 000000000002b3c3 RSI: ffffffff815ce751 RDI: fffff52000f50ee6 [ 291.143986][ T8867] RBP: ffffffff8828fe00 R08: ffff8880520a8340 R09: ffffed1015ce66a9 [ 291.148379][ T8868] ? memtype_reserve+0x69f/0x820 [ 291.156321][ T8867] R10: ffff8880ae733547 R11: ffffed1015ce66a8 R12: 000ffffffffff000 [ 291.164283][ T8868] __warn.cold+0x2f/0x35 [ 291.169196][ T8867] R13: 1ffff92000f50efa R14: dffffc0000000000 R15: 0000000000000000 [ 291.177218][ T8868] ? irq_work_queue+0xc3/0x100 [ 291.181358][ T8867] FS: 00007f616db0d700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 291.189315][ T8868] ? memtype_reserve+0x69f/0x820 [ 291.194060][ T8867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.203140][ T8868] report_bug+0x27b/0x2f0 [ 291.208059][ T8867] CR2: 000000000043e260 CR3: 000000008ffb7000 CR4: 00000000001406e0 [ 291.214699][ T8868] do_error_trap+0x12b/0x220 [ 291.218921][ T8867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.226875][ T8868] ? memtype_reserve+0x69f/0x820 [ 291.231431][ T8867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.239383][ T8868] do_invalid_op+0x32/0x40 [ 291.244289][ T8867] Call Trace: [ 291.252251][ T8868] ? memtype_reserve+0x69f/0x820 [ 291.256741][ T8867] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 291.259910][ T8868] invalid_op+0x23/0x30 [ 291.264863][ T8867] ? stack_depot_save+0x252/0x440 [ 291.270656][ T8868] RIP: 0010:memtype_reserve+0x69f/0x820 [ 291.274809][ T8867] ? pat_init+0x440/0x440 [ 291.279803][ T8868] Code: 48 8b 2c ed 80 ff 28 88 e8 ae ae 3e 00 48 8d 4b ff 49 89 e8 4c 89 e2 48 c7 c6 e0 ff 28 88 48 c7 c7 40 f8 28 88 e8 79 e8 0f 00 <0f> 0b 41 bf ea ff ff ff e9 03 fc ff ff 41 bf ea ff ff ff e9 f8 fb [ 291.285330][ T8867] ? __init_cache_modes+0x270/0x270 [ 291.289622][ T8868] RSP: 0018:ffffc90007aff7a0 EFLAGS: 00010282 [ 291.309297][ T8867] ? save_stack+0x32/0x40 [ 291.314402][ T8868] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000000 [ 291.320442][ T8867] ? save_stack+0x1b/0x40 [ 291.324734][ T8868] RDX: 0000000000014627 RSI: ffffffff815ce751 RDI: fffff52000f5fee6 [ 291.324747][ T8868] RBP: ffffffff8828fe00 R08: ffff888055584340 R09: ffffed1015cc66a9 [ 291.332703][ T8867] reserve_pfn_range+0x173/0x470 [ 291.336989][ T8868] R10: ffff8880ae633547 R11: ffffed1015cc66a8 R12: 000ffffffffff000 [ 291.337001][ T8868] R13: 1ffff92000f5fefa R14: dffffc0000000000 R15: 0000000000000000 [ 291.345398][ T8867] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.353486][ T8868] ? vprintk_func+0x81/0x17e [ 291.358352][ T8867] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 291.366310][ T8868] ? pat_init+0x440/0x440 [ 291.374322][ T8867] ? mmap_region+0xafb/0x1540 [ 291.380289][ T8868] ? __init_cache_modes+0x270/0x270 [ 291.384871][ T8867] ? do_mmap+0x849/0x1160 [ 291.390571][ T8868] ? save_stack+0x32/0x40 [ 291.394950][ T8867] ? vm_mmap_pgoff+0x197/0x200 [ 291.399536][ T8868] ? save_stack+0x1b/0x40 [ 291.399556][ T8868] reserve_pfn_range+0x173/0x470 [ 291.404726][ T8867] ? ksys_mmap_pgoff+0x457/0x5b0 [ 291.409029][ T8868] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.413380][ T8867] ? do_syscall_64+0xf6/0x7d0 [ 291.418073][ T8868] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 291.422382][ T8867] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.427340][ T8868] ? mark_held_locks+0xe0/0xe0 [ 291.432648][ T8867] track_pfn_remap+0x18b/0x280 [ 291.438704][ T8868] ? mmap_region+0xafb/0x1540 [ 291.443362][ T8867] remap_pfn_range+0x202/0xbf0 [ 291.449045][ T8868] ? do_mmap+0x849/0x1160 [ 291.449063][ T8868] ? vm_mmap_pgoff+0x197/0x200 [ 291.455407][ T8867] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 291.460098][ T8868] ? ksys_mmap_pgoff+0x457/0x5b0 [ 291.464833][ T8867] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 291.469473][ T8868] ? do_syscall_64+0xf6/0x7d0 [ 291.469492][ T8868] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.474227][ T8867] ? copy_page_range+0x1f00/0x1f00 [ 291.478544][ T8868] track_pfn_remap+0x18b/0x280 [ 291.483279][ T8867] ? __kmalloc+0x62f/0x7a0 [ 291.488797][ T8868] remap_pfn_range+0x202/0xbf0 [ 291.493784][ T8867] ? hcd_buffer_alloc+0x1ed/0x290 [ 291.499495][ T8868] ? __kmalloc+0x5e7/0x7a0 [ 291.504189][ T8867] dma_direct_mmap+0x197/0x260 [ 291.510217][ T8868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 291.515297][ T8867] dma_mmap_attrs+0xfe/0x150 [ 291.520031][ T8868] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 291.524419][ T8867] usbdev_mmap+0x3ae/0x730 [ 291.529154][ T8868] ? copy_page_range+0x1f00/0x1f00 [ 291.535028][ T8867] ? usbdev_vm_close+0x40/0x40 [ 291.539415][ T8868] ? __kmalloc+0x62f/0x7a0 [ 291.544168][ T8867] mmap_region+0xafb/0x1540 [ 291.549678][ T8868] ? hcd_buffer_alloc+0x1ed/0x290 [ 291.554260][ T8867] ? __x64_sys_brk+0x6e0/0x6e0 [ 291.560029][ T8868] dma_direct_mmap+0x197/0x260 [ 291.564491][ T8867] ? security_mmap_addr+0x81/0xa0 [ 291.569501][ T8868] dma_mmap_attrs+0xfe/0x150 [ 291.574256][ T8867] ? get_unmapped_area+0x2a0/0x3c0 [ 291.578642][ T8868] usbdev_mmap+0x3ae/0x730 [ 291.583118][ T8867] do_mmap+0x849/0x1160 [ 291.588121][ T8868] ? usbdev_vm_close+0x40/0x40 [ 291.592861][ T8867] vm_mmap_pgoff+0x197/0x200 [ 291.597685][ T8868] mmap_region+0xafb/0x1540 [ 291.602681][ T8867] ? randomize_stack_top+0x100/0x100 [ 291.607247][ T8868] ? __x64_sys_brk+0x6e0/0x6e0 [ 291.612405][ T8867] ? ksys_dup3+0x3c0/0x3c0 [ 291.616737][ T8868] ? security_mmap_addr+0x81/0xa0 [ 291.620870][ T8867] ? ns_to_kernel_old_timeval+0x100/0x100 [ 291.625607][ T8868] ? get_unmapped_area+0x2a0/0x3c0 [ 291.630173][ T8867] ksys_mmap_pgoff+0x457/0x5b0 [ 291.634649][ T8868] do_mmap+0x849/0x1160 [ 291.639951][ T8867] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 291.644709][ T8868] vm_mmap_pgoff+0x197/0x200 [ 291.649193][ T8867] ? __ia32_sys_clock_settime+0x260/0x260 [ 291.654153][ T8868] ? randomize_stack_top+0x100/0x100 [ 291.659886][ T8867] ? trace_hardirqs_off_caller+0x55/0x230 [ 291.664964][ T8868] ? ksys_dup3+0x3c0/0x3c0 [ 291.669719][ T8867] do_syscall_64+0xf6/0x7d0 [ 291.673847][ T8868] ? ns_to_kernel_old_timeval+0x100/0x100 [ 291.679460][ T8867] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.684024][ T8868] ksys_mmap_pgoff+0x457/0x5b0 [ 291.689730][ T8867] RIP: 0033:0x45ca29 [ 291.695013][ T8868] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 291.700709][ T8867] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.705095][ T8868] ? __ia32_sys_clock_settime+0x260/0x260 [ 291.709564][ T8867] RSP: 002b:00007f616db0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 291.715262][ T8868] ? trace_hardirqs_off_caller+0x55/0x230 [ 291.721137][ T8867] RAX: ffffffffffffffda RBX: 00000000004f5dc0 RCX: 000000000045ca29 [ 291.725884][ T8868] do_syscall_64+0xf6/0x7d0 [ 291.729746][ T8867] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 000000002000b000 [ 291.735359][ T8868] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.755036][ T8867] RBP: 000000000078bf00 R08: 0000000000000003 R09: 0000000000000000 [ 291.760735][ T8868] RIP: 0033:0x45ca29 [ 291.769138][ T8867] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000ffffffff [ 291.769151][ T8867] R13: 000000000000073e R14: 00000000004ca1f5 R15: 00007f616db0d6d4 [ 291.774863][ T8868] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.782840][ T8867] irq event stamp: 338 [ 291.787310][ T8868] RSP: 002b:00007ff4da832c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 13:51:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 291.795283][ T8867] hardirqs last enabled at (337): [] _raw_spin_unlock_irq+0x1f/0x80 [ 291.801139][ T8868] RAX: ffffffffffffffda RBX: 00000000004f5dc0 RCX: 000000000045ca29 [ 291.809120][ T8867] hardirqs last disabled at (338): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 291.809141][ T8867] softirqs last enabled at (332): [] __do_softirq+0x6ef/0x9f7 [ 291.812996][ T8868] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 000000002000b000 [ 291.813008][ T8868] RBP: 000000000078bf00 R08: 0000000000000003 R09: 0000000000000000 13:51:48 executing program 3: creat(&(0x7f0000000180)='./bus\x00', 0x0) readlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=""/79, 0x4f) [ 291.820988][ T8867] softirqs last disabled at (283): [] irq_exit+0x192/0x1d0 [ 291.829090][ T8868] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000ffffffff [ 291.848680][ T8867] ---[ end trace 7dc3b7b206526f89 ]--- [ 291.852756][ T8868] R13: 000000000000073e R14: 00000000004ca1f5 R15: 00007ff4da8336d4 [ 291.945717][ T8868] Kernel Offset: disabled [ 291.950378][ T8868] Rebooting in 86400 seconds..