[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   77.990881][   T27] audit: type=1800 audit(1580522166.437:25): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   78.011371][   T27] audit: type=1800 audit(1580522166.437:26): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   78.049840][   T27] audit: type=1800 audit(1580522166.447:27): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts.
2020/02/01 01:56:17 fuzzer started
2020/02/01 01:56:19 dialing manager at 10.128.0.26:45183
2020/02/01 01:56:19 syscalls: 2939
2020/02/01 01:56:19 code coverage: enabled
2020/02/01 01:56:19 comparison tracing: enabled
2020/02/01 01:56:19 extra coverage: enabled
2020/02/01 01:56:19 setuid sandbox: enabled
2020/02/01 01:56:19 namespace sandbox: enabled
2020/02/01 01:56:19 Android sandbox: /sys/fs/selinux/policy does not exist
2020/02/01 01:56:19 fault injection: enabled
2020/02/01 01:56:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/02/01 01:56:19 net packet injection: enabled
2020/02/01 01:56:19 net device setup: enabled
2020/02/01 01:56:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/02/01 01:56:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
01:59:02 executing program 0:

01:59:02 executing program 1:

syzkaller login: [  253.851387][ T9820] IPVS: ftp: loaded support on port[0] = 21
[  254.054741][ T9820] chnl_net:caif_netlink_parms(): no params data found
01:59:02 executing program 2:

[  254.100725][ T9823] IPVS: ftp: loaded support on port[0] = 21
[  254.226465][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.243787][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.268263][ T9820] device bridge_slave_0 entered promiscuous mode
[  254.301854][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.318198][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.337051][ T9820] device bridge_slave_1 entered promiscuous mode
[  254.387668][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.401778][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.430573][ T9827] IPVS: ftp: loaded support on port[0] = 21
[  254.465635][ T9820] team0: Port device team_slave_0 added
01:59:02 executing program 3:

[  254.509824][ T9820] team0: Port device team_slave_1 added
[  254.554855][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.563704][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.591419][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.619869][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.626885][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.687120][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.711125][ T9823] chnl_net:caif_netlink_parms(): no params data found
[  254.792483][ T9830] IPVS: ftp: loaded support on port[0] = 21
01:59:03 executing program 4:

[  254.920431][ T9820] device hsr_slave_0 entered promiscuous mode
[  254.967452][ T9820] device hsr_slave_1 entered promiscuous mode
01:59:03 executing program 5:

[  255.151287][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.159574][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.167306][ T9834] IPVS: ftp: loaded support on port[0] = 21
[  255.174650][ T9823] device bridge_slave_0 entered promiscuous mode
[  255.222124][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.229947][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.240590][ T9823] device bridge_slave_1 entered promiscuous mode
[  255.288830][ T9827] chnl_net:caif_netlink_parms(): no params data found
[  255.353262][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.381069][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.468946][ T9830] chnl_net:caif_netlink_parms(): no params data found
[  255.512528][ T9823] team0: Port device team_slave_0 added
[  255.522322][ T9823] team0: Port device team_slave_1 added
[  255.536843][ T9837] IPVS: ftp: loaded support on port[0] = 21
[  255.605114][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.612496][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.620923][ T9827] device bridge_slave_0 entered promiscuous mode
[  255.641104][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.649073][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.656873][ T9827] device bridge_slave_1 entered promiscuous mode
[  255.664632][ T9820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  255.732696][ T9820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  255.797905][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.804908][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.831360][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.859740][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.870382][ T9820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  255.927425][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.934520][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.942672][ T9830] device bridge_slave_0 entered promiscuous mode
[  255.950358][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.958066][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.985102][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.997993][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.016323][ T9820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  256.091500][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.098739][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.106435][ T9830] device bridge_slave_1 entered promiscuous mode
[  256.135567][ T9827] team0: Port device team_slave_0 added
[  256.147576][ T9827] team0: Port device team_slave_1 added
[  256.181423][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.194463][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.219042][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.226042][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.253322][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.330158][ T9823] device hsr_slave_0 entered promiscuous mode
[  256.387481][ T9823] device hsr_slave_1 entered promiscuous mode
[  256.427167][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.435068][ T9823] Cannot create hsr debugfs directory
[  256.448798][ T9834] chnl_net:caif_netlink_parms(): no params data found
[  256.463851][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.471778][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.499289][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.515865][ T9830] team0: Port device team_slave_0 added
[  256.524530][ T9830] team0: Port device team_slave_1 added
[  256.650606][ T9827] device hsr_slave_0 entered promiscuous mode
[  256.717449][ T9827] device hsr_slave_1 entered promiscuous mode
[  256.757150][ T9827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.764782][ T9827] Cannot create hsr debugfs directory
[  256.771051][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.778517][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.805586][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.818438][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.825552][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.851505][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.955661][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.963102][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.971445][ T9834] device bridge_slave_0 entered promiscuous mode
[  257.030257][ T9830] device hsr_slave_0 entered promiscuous mode
[  257.077489][ T9830] device hsr_slave_1 entered promiscuous mode
[  257.117242][ T9830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.124872][ T9830] Cannot create hsr debugfs directory
[  257.151784][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.159022][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.166701][ T9834] device bridge_slave_1 entered promiscuous mode
[  257.253501][ T9837] chnl_net:caif_netlink_parms(): no params data found
[  257.273877][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.288703][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.373799][ T9834] team0: Port device team_slave_0 added
[  257.384693][ T9834] team0: Port device team_slave_1 added
[  257.453327][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.460768][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.468829][ T9837] device bridge_slave_0 entered promiscuous mode
[  257.495991][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.504175][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.531823][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.544561][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.551694][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.578077][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.593536][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.600959][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.609416][ T9837] device bridge_slave_1 entered promiscuous mode
[  257.628699][ T9827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  257.679855][ T9827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  257.720276][ T9827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  257.783074][ T9827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  257.864419][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.940384][ T9834] device hsr_slave_0 entered promiscuous mode
[  257.978630][ T9834] device hsr_slave_1 entered promiscuous mode
[  258.040530][ T9834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.048490][ T9834] Cannot create hsr debugfs directory
[  258.056064][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.078632][ T9823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  258.122678][ T9823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  258.182079][ T9823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  258.239530][ T9823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  258.285065][ T9837] team0: Port device team_slave_0 added
[  258.329632][ T9837] team0: Port device team_slave_1 added
[  258.335444][ T9830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  258.414634][ T9830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  258.464325][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.493194][ T9830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  258.525794][ T9830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  258.589348][ T9820] 8021q: adding VLAN 0 to HW filter on device team0
[  258.596816][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.604749][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.632415][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.648074][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.655136][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.683060][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.697406][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  258.706006][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  258.748419][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  258.761817][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  258.771010][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.778254][ T3133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.786811][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  258.838517][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  258.851329][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  258.860214][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.867383][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.875414][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  258.884173][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  258.969808][ T9837] device hsr_slave_0 entered promiscuous mode
[  259.018523][ T9837] device hsr_slave_1 entered promiscuous mode
[  259.067270][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.074865][ T9837] Cannot create hsr debugfs directory
[  259.112360][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.121365][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.130204][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  259.140241][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  259.149375][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  259.169745][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.201215][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.210272][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.219696][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  259.229570][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.239406][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  259.290861][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.328756][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.336546][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.351256][ T9823] 8021q: adding VLAN 0 to HW filter on device team0
[  259.394902][ T9827] 8021q: adding VLAN 0 to HW filter on device team0
[  259.403949][ T9834] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  259.450948][ T9834] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  259.509662][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.517347][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.524794][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.533193][ T3133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.548639][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.574943][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.582596][ T9834] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  259.645811][ T9834] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  259.705116][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.715729][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.724625][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.731793][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.740812][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.750005][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.759060][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.766125][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.774100][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.783096][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.791824][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.800780][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.807908][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.816289][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.824993][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.847948][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.859872][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.873252][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.883323][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  259.922469][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  259.932004][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  259.940983][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.951049][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.960302][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.968973][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  259.978185][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.987058][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.995602][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.002758][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.037729][ T9830] 8021q: adding VLAN 0 to HW filter on device team0
[  260.052137][ T9823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.064711][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.073174][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  260.085686][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  260.096405][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  260.104608][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  260.112669][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.121089][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.171649][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.181623][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.193168][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  260.203097][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  260.212123][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.219221][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.227269][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  260.235872][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  260.245118][ T9820] device veth0_vlan entered promiscuous mode
[  260.267376][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  260.275195][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  260.284589][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  260.293703][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.303484][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  260.312539][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  260.321492][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.328767][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.345606][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.358444][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.392672][ T9820] device veth1_vlan entered promiscuous mode
[  260.404689][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  260.416582][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.425116][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.435991][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  260.444760][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.456286][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.498148][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  260.506311][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  260.520056][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.530011][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.538885][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  260.548212][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  260.556725][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.565656][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.574568][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.583221][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.592232][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.609816][ T9837] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  260.679831][ T9837] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  260.734758][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.746871][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.763207][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.779802][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.788795][ T9837] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  260.831361][ T9837] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  260.907805][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.917636][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.925153][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.940914][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.974295][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.985358][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.994804][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  261.004053][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  261.012991][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  261.021531][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  261.032147][ T9820] device veth0_macvtap entered promiscuous mode
[  261.050838][ T9820] device veth1_macvtap entered promiscuous mode
[  261.069243][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.092704][ T9834] 8021q: adding VLAN 0 to HW filter on device team0
[  261.121719][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  261.130610][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  261.139413][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  261.148171][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  261.199068][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  261.212964][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  261.221960][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.229100][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.237257][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.245614][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.260761][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.272119][ T9823] device veth0_vlan entered promiscuous mode
[  261.297346][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  261.305843][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  261.317859][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  261.325604][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  261.335062][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  261.344375][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  261.353229][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  261.362390][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  261.371813][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  261.380823][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.387967][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.401299][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.435281][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  261.444825][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  261.455124][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.464024][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.473614][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  261.482713][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  261.514695][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.534069][ T9823] device veth1_vlan entered promiscuous mode
[  261.605751][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  261.616176][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.624819][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.636286][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  261.645341][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  261.655534][ T9827] device veth0_vlan entered promiscuous mode
[  261.756100][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  261.767744][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  261.775623][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  261.785726][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.795099][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  261.803959][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  261.812613][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  261.824054][ T9827] device veth1_vlan entered promiscuous mode
[  261.843131][ T9834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.856386][ T9834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  261.887242][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  261.895725][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
01:59:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001a000108000000000000000054b36ec146b00000007dbf87af87f8da438000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)

[  261.905935][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  261.917714][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  261.934496][ T9830] device veth0_vlan entered promiscuous mode
[  261.961083][ T9837] 8021q: adding VLAN 0 to HW filter on device team0
[  261.987104][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.995490][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  262.029889][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.040204][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.076283][ T9830] device veth1_vlan entered promiscuous mode
[  262.083805][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  262.092683][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.101870][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.110574][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.119829][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.128926][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.135996][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.144638][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  262.154105][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.162784][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.169901][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
01:59:10 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', 0x0, 0xa3, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="c920b05e9ebf0a40ff6d7b66447a77fa6469654d4500aa0a588b71f6d23508484de17238deced156baa97702f747fca910731f4451776e844eb50b5eee2665d86f52fadad6944c4a02768c1866426f5c8a920b6ef7ed67eb285bcfc60d497ef13e2e5c9863c45807eeeefe8ab73f20ed00414f479ad49bd205bc80a0d797c11b5ffcb30d1f5ec9f3854095d88b2375f59a6cc013aad3b07a2e3b4e1a5deaa686a6d12514c64fc357eb91490ae7ba81c00a9c6bf9846c3621e75f1b4621f319e60af055b7ccb0c2dd781caeeb6fac97781720f4c987981a7e9c0852ac286896d981bbf1a6aea6015b5209e416c5f4a09199c652", 0xf3, 0x1}, {0x0}], 0x10000, 0x0)
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@pcr={'pcr', 0x3d, 0x12}}, {@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

[  262.197354][ T9823] device veth0_macvtap entered promiscuous mode
[  262.219308][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.228086][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  262.236260][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.244125][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.252685][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.287714][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.299544][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.322639][ T9823] device veth1_macvtap entered promiscuous mode
[  262.329703][    C1] hrtimer: interrupt took 32111 ns
[  262.390241][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  262.407742][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  262.432325][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  262.442796][ T9857] overlayfs: conflicting lowerdir path
[  262.451677][ T9862] 9pnet: Could not find request transport: xen
[  262.485705][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  262.495399][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  262.514227][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.543773][ T9862] overlayfs: workdir and upperdir must reside under the same mount
[  262.555929][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.565220][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.578127][ T9827] device veth0_macvtap entered promiscuous mode
[  262.612000][ T9830] device veth0_macvtap entered promiscuous mode
[  262.629318][ T9857] 9pnet: Could not find request transport: xen
01:59:11 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
syz_mount_image$ocfs2(&(0x7f0000000140)='ocfs2\x00', 0x0, 0xa3, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="c920b05e9ebf0a40ff6d7b66447a77fa6469654d4500aa0a588b71f6d23508484de17238deced156baa97702f747fca910731f4451776e844eb50b5eee2665d86f52fadad6944c4a02768c1866426f5c8a920b6ef7ed67eb285bcfc60d497ef13e2e5c9863c45807eeeefe8ab73f20ed00414f479ad49bd205bc80a0d797c11b5ffcb30d1f5ec9f3854095d88b2375f59a6cc013aad3b07a2e3b4e1a5deaa686a6d12514c64fc357eb91490ae7ba81c00a9c6bf9846c3621e75f1b4621f319e60af055b7ccb0c2dd781caeeb6fac97781720f4c987981a7e9c0852ac286896d981bbf1a6aea6015b5209e416c5f4a09199c652", 0xf3, 0x1}, {0x0}], 0x10000, 0x0)
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@pcr={'pcr', 0x3d, 0x12}}, {@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

[  262.658806][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.668854][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  262.688789][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.703277][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  262.712205][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  262.721213][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  262.729789][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  262.742026][ T9827] device veth1_macvtap entered promiscuous mode
[  262.832642][ T9874] overlayfs: conflicting lowerdir path
[  262.841971][ T9830] device veth1_macvtap entered promiscuous mode
[  262.864830][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  262.878281][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.879716][ T9876] 9pnet: Could not find request transport: xen
[  262.891064][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.922940][ T9837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.941076][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  262.957856][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  262.966859][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  262.976045][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
01:59:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xb, 0x3}, 0x14}}, 0x0)

[  262.993504][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  263.005211][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  263.014478][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  263.057957][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.070439][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.082480][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.092392][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
01:59:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, 0x3, 0x7, 0x301}, 0x14}}, 0x0)

[  263.117366][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.137480][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
01:59:11 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
close(r0)

[  263.166346][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.180147][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.204558][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.228921][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.240093][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.250614][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.261510][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
01:59:11 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x104, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e})

[  263.273699][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.286194][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.309508][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.320634][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.329739][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  263.338864][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  263.347866][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  263.356392][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  263.365688][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  263.374358][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  263.392943][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.406103][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.416030][ T9827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.427147][ T9827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.439682][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.460727][ T9834] device veth0_vlan entered promiscuous mode
[  263.473084][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.484698][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.495292][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.512018][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.521943][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.532573][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.544293][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.561509][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  263.570021][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  263.578734][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.587919][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.596663][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.605767][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.662813][ T9834] device veth1_vlan entered promiscuous mode
[  263.737878][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  263.879869][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.887646][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.898241][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0
01:59:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[0x0])
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000040))

[  264.006666][ T9834] device veth0_macvtap entered promiscuous mode
[  264.053375][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.084485][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.106275][ T9834] device veth1_macvtap entered promiscuous mode
[  264.143263][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
01:59:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64]])
r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)='\b\x00\x00\x00\x00', 0x5, r2)
r4 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

[  264.153914][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  264.189570][ T9908] overlayfs: conflicting lowerdir path
[  264.242313][ T9905] overlayfs: workdir and upperdir must reside under the same mount
[  264.265887][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
01:59:12 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40000000000a132, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', 0x0, 0x0, 0x0)

[  264.287636][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.339448][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  264.354939][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.373774][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  264.386448][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.397495][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  264.408927][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.459888][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.482440][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  264.492244][ T2868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  264.505226][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  264.517625][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.527816][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  264.541335][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.551365][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  264.563493][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.573443][ T9834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  264.591687][ T9834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.604013][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.630311][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  264.645060][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  264.676029][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  264.688038][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  264.826022][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.836573][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.851435][ T9837] device veth0_vlan entered promiscuous mode
[  264.860671][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.868614][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.885644][ T9837] device veth1_vlan entered promiscuous mode
[  264.934451][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.946168][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.965177][ T9837] device veth0_macvtap entered promiscuous mode
01:59:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffc, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8d, 0x0, [], 0xff}]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  264.989517][ T9837] device veth1_macvtap entered promiscuous mode
[  265.036797][ T9927] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  265.063075][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  265.077158][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.088229][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  265.099635][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.110361][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  265.121111][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.131016][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  265.141766][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.152640][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  265.163287][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.174784][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.183815][    T0] NOHZ: local_softirq_pending 08
[  265.192445][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.204398][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.212995][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.222384][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  265.242086][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  265.254977][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.266715][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  265.277263][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.287520][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  265.298095][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.308376][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  265.318948][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.329928][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  265.342567][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.364484][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.376526][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  265.385902][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
01:59:14 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

01:59:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}]}, 0x2c, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

01:59:14 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@pcr={'pcr', 0x3d, 0x12}}, {@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:14 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="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", 0x101)
sendfile(r3, r4, 0x0, 0x7fffffa7)

01:59:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x0, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:14 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x0, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

[  265.770634][ T9948] overlayfs: conflicting lowerdir path
[  265.806503][ T9938] 9pnet_virtio: no channels available for device syz
[  265.821553][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  265.821568][   T27] audit: type=1800 audit(1580522354.267:31): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=22 res=0
[  265.862757][ T9952] 9pnet: Could not find request transport: xen
[  265.882745][ T9948] overlayfs: workdir and upperdir must reside under the same mount
[  265.931734][ T9957] 9pnet: Could not find request transport: xen
[  265.942320][   T27] audit: type=1800 audit(1580522354.327:32): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=22 res=0
[  265.945176][ T9953] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
01:59:14 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc", 0x101)
sendfile(r3, r4, 0x0, 0x7fffffa7)

[  265.981180][ T9955] 9pnet_virtio: no channels available for device syz
[  266.012334][ T9942] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
01:59:14 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="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", 0x101)
sendfile(r3, r4, 0x0, 0x7fffffa7)

[  266.109106][ T9959] 9pnet: Could not find request transport: xen
[  266.216271][ T9952] overlayfs: workdir and upperdir must reside under the same mount
[  266.263968][ T9956] overlayfs: workdir and upperdir must reside under the same mount
[  266.334893][ T9957] overlayfs: filesystem on './file0' not supported as upperdir
01:59:14 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc", 0x101)
sendfile(r3, r4, 0x0, 0x7fffffa7)

01:59:14 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@pcr={'pcr', 0x3d, 0x12}}, {@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

[  266.398292][   T27] audit: type=1800 audit(1580522354.847:33): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=23 res=0
[  266.431874][ T9939] 9pnet: Could not find request transport: xen
01:59:14 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x0, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x200000, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:15 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
close(r0)

[  266.530290][   T27] audit: type=1800 audit(1580522354.867:34): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=23 res=0
[  266.607235][   T27] audit: type=1800 audit(1580522354.887:35): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16565 res=0
[  266.784332][   T27] audit: type=1800 audit(1580522354.927:36): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16565 res=0
01:59:15 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

01:59:15 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x0, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:15 executing program 3:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)

[  266.961343][T10003] 9pnet: Could not find request transport: xen
[  266.996792][T10006] 9pnet: Could not find request transport: xen
[  267.015037][   T27] audit: type=1800 audit(1580522355.127:37): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16566 res=0
[  267.071760][   T27] audit: type=1800 audit(1580522355.127:38): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16566 res=0
01:59:15 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="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", 0x101)
sendfile(r3, r4, 0x0, 0x7fffffa7)

01:59:15 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6)

[  267.202795][   T27] audit: type=1800 audit(1580522355.327:39): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=24 res=0
[  267.316112][   T27] audit: type=1800 audit(1580522355.407:40): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=24 res=0
01:59:15 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffc, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8d, 0x0, [], 0xff}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:15 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f00000000c0))

01:59:15 executing program 5:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r1 = shmat(r0, &(0x7f0000e80000/0x2000)=nil, 0x0)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
shmdt(r1)

01:59:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c3", 0x1}], 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  267.606957][T10030] overlayfs: conflicting lowerdir path
[  267.618126][T10032] 9pnet: Could not find request transport: xen
[  267.700065][T10032] overlayfs: workdir and upperdir must reside under the same mount
01:59:16 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x8c802, 0xcc)
write(r3, &(0x7f0000000600)="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", 0x101)

[  267.758190][T10030] 9pnet: Could not find request transport: xen
01:59:16 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
socket(0x3, 0x6, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000440)={'trans=xen,', {[], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, 'ocfs2\x00'}}]}})
io_submit(0x0, 0x1, &(0x7f0000000e40)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r0 = dup(0xffffffffffffffff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))

01:59:16 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
write$binfmt_script(r0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket(0x0, 0x0, 0x0)

01:59:16 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

01:59:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = dup3(r0, r1, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
dup2(r4, r5)

01:59:16 executing program 3:
getpgid(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x11, 0x4, 0x3e0, 0x1f8, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@broadcast, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@arp={@multicast1, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00', 'caif0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2ee5b242e2c558c7a7a75a2f00132ad71e7e39a3684eb2c17929345799ce"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430)

01:59:16 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r3, &(0x7f0000000600)="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", 0x101)

[  268.227984][T10067] 9pnet: Could not find request transport: xen
[  268.241091][T10066] overlayfs: conflicting lowerdir path
[  268.309750][T10071] x_tables: unsorted underflow at hook 4
01:59:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

01:59:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0)

[  268.657785][T10046] debugfs: Directory '10046-4' with parent 'kvm' already present!
01:59:17 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:17 executing program 2:
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00')
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00')
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0)

01:59:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c3", 0x1}], 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

01:59:17 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc", 0x101)

[  269.007369][T10106] team0: Cannot enslave team device to itself
01:59:17 executing program 2:
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00013e000042000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

[  269.441622][T10123] ldm_validate_privheads(): Disk read failed.
[  269.452589][T10123]  loop2: p2 p3 p4
[  269.456443][T10123] loop2: partition table partially beyond EOD, truncated
[  269.476864][T10123] loop2: p2 size 1073741824 extends beyond EOD, truncated
[  269.488481][T10123] loop2: p3 start 225 is beyond EOD, truncated
[  269.494768][T10123] loop2: p4 size 3657465856 extends beyond EOD, truncated
[  269.658417][T10123] ldm_validate_privheads(): Disk read failed.
[  269.664601][T10123]  loop2: p2 p3 p4
[  269.672053][T10123] loop2: partition table partially beyond EOD, truncated
[  269.679794][T10123] loop2: p2 size 1073741824 extends beyond EOD, truncated
[  269.688422][T10123] loop2: p3 start 225 is beyond EOD, truncated
[  269.694764][T10123] loop2: p4 size 3657465856 extends beyond EOD, truncated
01:59:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14}, [@RTA_IIF={0x8, 0x1, r2}]}, 0x24}}, 0x0)

01:59:19 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x101)

01:59:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

01:59:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0)
mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

01:59:19 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0)

01:59:19 executing program 3:
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))

01:59:19 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001a000108000000000000000054b36ec146b00000007dbf87af87f8da438000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000f9ffffff0000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/237], 0x138}}, 0x0)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

01:59:20 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0)

01:59:20 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x101)

01:59:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r2, r2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

01:59:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
quotactl(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x4}, {0x0, 0x0, 0x0, [], 0xfc}, {}, {0x0, 0x1}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0xfc, 0x0, [], 0x8}, {0x0, 0x80}, {0x0, 0x19}, {0x0, 0x0, 0xff, [], 0xfd}]}})

01:59:20 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:20 executing program 4:
unshare(0x400)
syz_read_part_table(0x0, 0x0, 0x0)

01:59:20 executing program 5:
unshare(0x20400)
r0 = epoll_create1(0x0)
close(r0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200))

01:59:20 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc", 0x101)

01:59:20 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001a000108000000000000000054b36ec146b00000007dbf87af87f8da438000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000f9ffffff0000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/237], 0x138}}, 0x0)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8010aebb, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x80}]}})

01:59:20 executing program 4:
semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))

01:59:21 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:21 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="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", 0x101)

01:59:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0xf7, 0x3, &(0x7f0000000180)=[{&(0x7f0000000100)="2de8711d4ec6850ff97b1f049b676372d2bff2cfcc776e0f43", 0x19, 0x7}, {&(0x7f00000005c0)="94", 0x1, 0xffffffffffffffff}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000000240)='wlan0\x95*!\x00')
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x0, 0x10000, 0x80, 0x5, 0x82, 0x0, 0x101, 0x5, 0x1, 0x800, 0xb43204e6d9176db8, 0x0, {0x1, 0x80}, 0x3, 0x3}})

01:59:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8030ae7c, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0xfd}]}})

01:59:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x5c}}, 0x0)

[  272.960222][T10238] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
01:59:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0x0, 0x2)
read$char_usb(0xffffffffffffffff, &(0x7f0000000740)=""/129, 0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl(0xffffffaa, &(0x7f0000000580)='./file0\x00', r2, &(0x7f0000000680)="c0f55b3d51e127f5aa1c584b4597bd4fb928b339f81f215e67a585757d7c7df9f72dd2de277b693a5f9d7bddd3ff7e5a219e5ac66ba1c0345a03be1206ae139143d8")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5d, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x3, 0x0, 0x44a337c5, 0x0, [{0x0, 0x0, 0x0, [], 0x1}, {0x4}, {0x0, 0x0, 0x0, [], 0xfc}, {}, {0x0, 0x1}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0xfc, 0x2, [], 0x8}, {0x0, 0x80}, {0x0, 0x19}, {0x0, 0x0, 0xff, [], 0xfd}, {}, {0x4}, {}, {0x0, 0x0, 0x0, [], 0x1}]}})

[  273.076508][T10239] nfs4: Unknown parameter 'wlan0•*!'
01:59:21 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x3}]}, 0x40}}, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)

01:59:21 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="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", 0x101)

01:59:21 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:21 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001a000108000000000000000054b36ec146b00000007dbf87af87f8da438000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000f9ffffff0000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/237], 0x138}}, 0x0)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:21 executing program 4:
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}}, 0x0)

01:59:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)

01:59:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x7530}, 0x10)

01:59:22 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:22 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="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", 0x101)

01:59:22 executing program 4:
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000300)="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", 0xfe0}, {0x0}, {&(0x7f0000001400)="b9cdde711d6c592d3a1a6a3baf207cb9ea89dc4d4c47d060f4df9cd6733d97987f89a35b0e91216dbd6acec3f281830e6085ba5050ec6cf91ad856f824deacef9fa3b92b09f39fefa2f38de2118e91bf326dee45c74631f1bad2f3aedfa801de45aad68f0565bee164c4a404ad56abc2222b00f53fba38e87dc7b759974b0a6b4847", 0x82}, {&(0x7f00000014c0)="db86576cd707e0202ffbae37ed32716583b5d91ee5b4d8ae7482ae8d867e246bfd2d573105ce16597a67b63f773ae53e2876a233969f932ef4fb14f76aec570b7bf1200fb8028b20e1572f3a4e0bb409a3196c0ec5e323950bce0c", 0x5b}], 0x4}, 0x4)
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac00013e000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

01:59:22 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001a000108000000000000000054b36ec146b00000007dbf87af87f8da438000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000f9ffffff0000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500"/237], 0x138}}, 0x0)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)={'blake2s-256\x00'}})

[  273.918130][T10295]  loop4: p2 < > p3 p4
[  273.937893][T10295] loop4: partition table partially beyond EOD, truncated
[  274.037368][T10295] loop4: p2 size 2 extends beyond EOD, truncated
[  274.061255][T10295] loop4: p3 start 225 is beyond EOD, truncated
[  274.068443][T10295] loop4: p4 size 3657465856 extends beyond EOD, truncated
01:59:22 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

01:59:22 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:22 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="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", 0x101)

01:59:22 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$inet(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r3, 0x0, r3)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0)
setresuid(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, <r4=>0x0}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
setregid(0x0, 0x0)
r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40)
rt_sigqueueinfo(r5, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)

[  274.228065][T10313]  loop4: p2 < > p3 p4
[  274.232195][T10313] loop4: partition table partially beyond EOD, truncated
[  274.272966][T10313] loop4: p2 size 2 extends beyond EOD, truncated
[  274.307479][T10313] loop4: p3 start 225 is beyond EOD, truncated
[  274.313696][T10313] loop4: p4 size 3657465856 extends beyond EOD, truncated
01:59:22 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
fchdir(0xffffffffffffffff)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc", 0x101)

01:59:22 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

01:59:22 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$dh_compute(0x12, 0x0, 0x0, 0x0, 0x0)

01:59:22 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r4, 0x0)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

01:59:23 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x40801, 0x0)
pwritev(r0, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:23 executing program 2:
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:59:23 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:23 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x40801, 0x0)
pwritev(r0, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:23 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x0, {{}, 0x2}}, 0x18)

01:59:23 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r3, &(0x7f0000000600)="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", 0x101)

01:59:23 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x40801, 0x0)
pwritev(r0, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000740)=""/129, 0x81)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x44a337c5, 0x0, [{}, {}, {}, {}, {0x0, 0x1}, {0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x19}, {0x0, 0x0, 0xff}, {}, {0x4}, {}, {0x0, 0x0, 0x0, [], 0x1}]}})

01:59:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x8, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x4}, {0x0, 0x0, 0x0, [], 0xfc}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, [], 0x8}, {}, {0x0, 0x19}, {0x0, 0x0, 0xff}]}})

[  275.027361][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  275.027374][   T27] audit: type=1800 audit(1580522363.467:46): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16646 res=0
01:59:23 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x40801, 0x0)
pwritev(r0, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:23 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r3, &(0x7f0000000600)="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", 0x101)

01:59:23 executing program 0:
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44)
io_setup(0x4, &(0x7f00000004c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r3, r4, 0x0)
fallocate(r2, 0x100000011, 0x804000, 0x2811ffff)
io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  275.313380][   T27] audit: type=1800 audit(1580522363.757:47): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16597 res=0
01:59:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
quotactl(0x0, 0x0, 0x0, &(0x7f0000000680))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x44a337c5, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x19}]}})

01:59:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
quotactl(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8030ae7c, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x44a337c5, 0x0, [{0x0, 0x0, 0x0, [], 0x1}, {}, {}, {}, {}, {0x6}]}})

01:59:24 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in6=@dev, 0xfffffffe, 0x1, 0x0, 0xfc}}, 0xe8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0)

01:59:24 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r3, &(0x7f0000000600)="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", 0x101)

01:59:24 executing program 4:
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

[  275.735810][   T27] audit: type=1800 audit(1580522364.177:48): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16603 res=0
01:59:24 executing program 4:
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0x0, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
quotactl(0xffffffaa, &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000680)="c0f55b3d51e127f5aa1c584b4597bd4fb928b339f81f215e67a585757d7c7df9f72dd2de277b693a5f9d7bddd3ff7e5a219e5ac66ba1c0")
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x3, 0x0, 0x44a337c5, 0x0, [{0x0, 0x0, 0x0, [], 0x1}, {0x4}, {0x0, 0x0, 0x0, [], 0xfc}, {}, {0x0, 0x1}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0xfc, 0x0, [], 0x8}, {0x0, 0x80}, {0x0, 0x19}, {0x0, 0x0, 0xff, [], 0xfd}]}})

01:59:24 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x22e00, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
write(r2, &(0x7f0000000600)="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", 0x101)

01:59:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
quotactl(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8030ae7c, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x44a337c5, 0x0, [{0x0, 0x0, 0x0, [], 0x1}, {}, {}, {}, {}, {0x6}]}})

01:59:24 executing program 4:
pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x53}, {&(0x7f0000000200)="f6", 0x1}], 0x2, 0x0)

01:59:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ife={0x30, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}}}]}]}, 0x48}}, 0x0)

[  276.224564][   T27] audit: type=1800 audit(1580522364.667:49): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16658 res=0
[  276.307083][T10447] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  276.318951][T10447] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  276.327535][T10447] CPU: 0 PID: 10447 Comm: syz-executor.5 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0
[  276.337429][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  276.348102][T10447] RIP: 0010:tcf_ife_cleanup+0x6e/0x400
[  276.353576][T10447] Code: 48 c1 ea 03 80 3c 02 00 0f 85 94 03 00 00 49 8b bd f8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 67 e8 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 03 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b
[  276.373816][T10447] RSP: 0018:ffffc9000763ed00 EFLAGS: 00010246
[  276.379888][T10447] RAX: dffffc0000000000 RBX: ffffffff865917d0 RCX: ffffffff815c2c79
[  276.387868][T10447] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[  276.395849][T10447] RBP: ffffc9000763ed50 R08: 0000000000000004 R09: fffff52000ec7d8e
[  276.403830][T10447] R10: fffff52000ec7d8d R11: 0000000000000003 R12: ffffffffffffffe8
[  276.412512][T10447] R13: ffff8880572cdc00 R14: ffff88808d440a00 R15: 0000000000000000
[  276.420496][T10447] FS:  00007f8a9d23f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  276.429439][T10447] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.436130][T10447] CR2: 0000000020000300 CR3: 0000000094fd7000 CR4: 00000000001406f0
[  276.444114][T10447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  276.452092][T10447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  276.460177][T10447] Call Trace:
[  276.463492][T10447]  ? unregister_ife_op+0x270/0x270
[  276.468750][T10447]  tcf_action_cleanup+0x62/0x1b0
[  276.473709][T10447]  __tcf_action_put+0xfa/0x130
[  276.478492][T10447]  __tcf_idr_release+0x59/0xf0
[  276.483280][T10447]  tcf_ife_init+0x97c/0x1870
[  276.487907][T10447]  ? tcf_ife_dump+0xc00/0xc00
[  276.492596][T10447]  ? tc_lookup_action_n+0xd2/0x100
[  276.497754][T10447]  ? lock_downgrade+0x920/0x920
[  276.502813][T10447]  ? __kasan_check_write+0x14/0x20
[  276.508052][T10447]  ? do_raw_read_unlock+0x3f/0x70
[  276.513096][T10447]  tcf_action_init_1+0x6b6/0xa40
[  276.518046][T10447]  ? tcf_action_dump_old+0x80/0x80
[  276.523254][T10447]  ? __nla_validate_parse+0x2d0/0x1ee0
[  276.528767][T10447]  ? is_bpf_text_address+0xac/0x160
[  276.533983][T10447]  tcf_action_init+0x21a/0x330
[  276.538853][T10447]  ? tcf_action_init_1+0xa40/0xa40
[  276.543977][T10447]  ? mark_lock+0xc2/0x1220
[  276.548394][T10447]  ? save_stack+0x23/0x90
[  276.552732][T10447]  ? __kasan_slab_free+0x102/0x150
[  276.557835][T10447]  ? kasan_slab_free+0xe/0x10
[  276.562630][T10447]  ? __kasan_check_read+0x11/0x20
[  276.567700][T10447]  tcf_action_add+0xf5/0x3b0
[  276.572343][T10447]  ? tca_action_gd+0x1760/0x1760
[  276.577390][T10447]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  276.583635][T10447]  ? __nla_parse+0x43/0x60
[  276.588067][T10447]  tc_ctl_action+0x390/0x488
[  276.592649][T10447]  ? tcf_action_add+0x3b0/0x3b0
[  276.597604][T10447]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  276.603882][T10447]  ? tcf_action_add+0x3b0/0x3b0
[  276.608814][T10447]  rtnetlink_rcv_msg+0x45e/0xaf0
[  276.613755][T10447]  ? rtnl_bridge_getlink+0x910/0x910
[  276.619341][T10447]  ? netlink_deliver_tap+0x226/0xbf0
[  276.624616][T10447]  ? find_held_lock+0x35/0x130
[  276.629378][T10447]  netlink_rcv_skb+0x177/0x450
[  276.634142][T10447]  ? rtnl_bridge_getlink+0x910/0x910
[  276.639529][T10447]  ? netlink_ack+0xb50/0xb50
[  276.644106][T10447]  ? __kasan_check_read+0x11/0x20
[  276.649274][T10447]  ? netlink_deliver_tap+0x248/0xbf0
[  276.654555][T10447]  rtnetlink_rcv+0x1d/0x30
[  276.658960][T10447]  netlink_unicast+0x59e/0x7e0
[  276.663746][T10447]  ? netlink_attachskb+0x870/0x870
[  276.668853][T10447]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  276.674658][T10447]  ? __check_object_size+0x3d/0x437
[  276.679860][T10447]  netlink_sendmsg+0x91c/0xea0
[  276.684674][T10447]  ? netlink_unicast+0x7e0/0x7e0
[  276.689675][T10447]  ? aa_sock_msg_perm.isra.0+0xba/0x170
[  276.695269][T10447]  ? apparmor_socket_sendmsg+0x2a/0x30
[  276.700728][T10447]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  276.707045][T10447]  ? security_socket_sendmsg+0x8d/0xc0
[  276.712500][T10447]  ? netlink_unicast+0x7e0/0x7e0
[  276.717496][T10447]  sock_sendmsg+0xd7/0x130
[  276.721914][T10447]  ____sys_sendmsg+0x753/0x880
[  276.726796][T10447]  ? kernel_sendmsg+0x50/0x50
[  276.731522][T10447]  ? __fget_files+0x337/0x520
[  276.736199][T10447]  ? find_held_lock+0x35/0x130
[  276.740956][T10447]  ___sys_sendmsg+0x100/0x170
[  276.745669][T10447]  ? sendmsg_copy_msghdr+0x70/0x70
[  276.750782][T10447]  ? __kasan_check_read+0x11/0x20
[  276.755803][T10447]  ? __fget_files+0x359/0x520
[  276.760476][T10447]  ? do_dup2+0x4f0/0x4f0
[  276.764717][T10447]  ? __fget_light+0x1ad/0x270
[  276.769418][T10447]  ? __fdget+0x1b/0x20
[  276.773498][T10447]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  276.779734][T10447]  __sys_sendmsg+0x105/0x1d0
[  276.784325][T10447]  ? __sys_sendmsg_sock+0xc0/0xc0
[  276.789445][T10447]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  276.794927][T10447]  ? do_syscall_64+0x26/0x790
[  276.799815][T10447]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  276.806027][T10447]  ? do_syscall_64+0x26/0x790
[  276.810758][T10447]  __x64_sys_sendmsg+0x78/0xb0
[  276.815535][T10447]  do_syscall_64+0xfa/0x790
[  276.820030][T10447]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  276.826130][T10447] RIP: 0033:0x45b399
[  276.830015][T10447] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  276.850073][T10447] RSP: 002b:00007f8a9d23ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.858578][T10447] RAX: ffffffffffffffda RBX: 00007f8a9d23f6d4 RCX: 000000000045b399
[  276.866540][T10447] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[  276.874683][T10447] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  276.882779][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  276.890740][T10447] R13: 00000000000009cb R14: 00000000004cb3cc R15: 000000000075bf2c
[  276.898705][T10447] Modules linked in:
[  276.902782][T10447] ---[ end trace 497d8fb85fbac8db ]---
[  276.908470][T10447] RIP: 0010:tcf_ife_cleanup+0x6e/0x400
[  276.913938][T10447] Code: 48 c1 ea 03 80 3c 02 00 0f 85 94 03 00 00 49 8b bd f8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 67 e8 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 03 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b
[  276.933830][T10447] RSP: 0018:ffffc9000763ed00 EFLAGS: 00010246
[  276.939946][T10447] RAX: dffffc0000000000 RBX: ffffffff865917d0 RCX: ffffffff815c2c79
[  276.948043][T10447] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[  276.956025][T10447] RBP: ffffc9000763ed50 R08: 0000000000000004 R09: fffff52000ec7d8e
[  276.964207][T10447] R10: fffff52000ec7d8d R11: 0000000000000003 R12: ffffffffffffffe8
[  276.972339][T10447] R13: ffff8880572cdc00 R14: ffff88808d440a00 R15: 0000000000000000
[  276.980395][T10447] FS:  00007f8a9d23f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  276.989361][T10447] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.995943][T10447] CR2: 0000000020000300 CR3: 0000000094fd7000 CR4: 00000000001406f0
[  277.003956][T10447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  277.011962][T10447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  277.020297][T10447] Kernel panic - not syncing: Fatal exception in interrupt
[  277.029045][T10447] Kernel Offset: disabled
[  277.033497][T10447] Rebooting in 86400 seconds..