[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. 2020/09/24 23:47:45 fuzzer started 2020/09/24 23:47:45 dialing manager at 10.128.0.105:44973 2020/09/24 23:47:46 syscalls: 3216 2020/09/24 23:47:46 code coverage: enabled 2020/09/24 23:47:46 comparison tracing: enabled 2020/09/24 23:47:46 extra coverage: extra coverage is not supported by the kernel 2020/09/24 23:47:46 setuid sandbox: enabled 2020/09/24 23:47:46 namespace sandbox: enabled 2020/09/24 23:47:46 Android sandbox: enabled 2020/09/24 23:47:46 fault injection: enabled 2020/09/24 23:47:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/24 23:47:46 net packet injection: enabled 2020/09/24 23:47:46 net device setup: enabled 2020/09/24 23:47:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/24 23:47:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/24 23:47:46 USB emulation: /dev/raw-gadget does not exist 2020/09/24 23:47:46 hci packet injection: enabled 2020/09/24 23:47:46 wifi device emulation: enabled 23:49:21 executing program 0: syzkaller login: [ 135.839098] audit: type=1400 audit(1600991361.515:8): avc: denied { execmem } for pid=6512 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:49:21 executing program 1: 23:49:21 executing program 2: 23:49:22 executing program 3: 23:49:22 executing program 4: 23:49:22 executing program 5: [ 137.079120] IPVS: ftp: loaded support on port[0] = 21 [ 137.204924] chnl_net:caif_netlink_parms(): no params data found [ 137.313955] IPVS: ftp: loaded support on port[0] = 21 [ 137.346643] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.353896] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.360927] device bridge_slave_0 entered promiscuous mode [ 137.373328] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.379710] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.387264] device bridge_slave_1 entered promiscuous mode [ 137.423178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.468040] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.519734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.523810] IPVS: ftp: loaded support on port[0] = 21 [ 137.528033] team0: Port device team_slave_0 added [ 137.542839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.550662] team0: Port device team_slave_1 added [ 137.579494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.587488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.623569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.660096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.674947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.703291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.715329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.739485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.786650] IPVS: ftp: loaded support on port[0] = 21 [ 137.882662] IPVS: ftp: loaded support on port[0] = 21 [ 137.882977] device hsr_slave_0 entered promiscuous mode [ 137.894709] device hsr_slave_1 entered promiscuous mode [ 137.915619] chnl_net:caif_netlink_parms(): no params data found [ 137.959635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 138.009577] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.071087] IPVS: ftp: loaded support on port[0] = 21 [ 138.189734] chnl_net:caif_netlink_parms(): no params data found [ 138.365729] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.372466] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.379408] device bridge_slave_0 entered promiscuous mode [ 138.414164] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.420539] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.433970] device bridge_slave_1 entered promiscuous mode [ 138.443174] chnl_net:caif_netlink_parms(): no params data found [ 138.505297] chnl_net:caif_netlink_parms(): no params data found [ 138.516293] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.553071] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.559511] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.568320] device bridge_slave_0 entered promiscuous mode [ 138.577904] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.585602] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.593664] device bridge_slave_1 entered promiscuous mode [ 138.601260] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.691136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.737734] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.747219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.757280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.765679] team0: Port device team_slave_0 added [ 138.808459] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.816801] team0: Port device team_slave_1 added [ 138.843050] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.850684] team0: Port device team_slave_0 added [ 138.872409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.878656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.905262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.917333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.932850] team0: Port device team_slave_1 added [ 138.954257] chnl_net:caif_netlink_parms(): no params data found [ 138.968475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.975152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.002187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.020236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.036872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.043258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.068532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.085524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.102738] Bluetooth: hci0: command 0x0409 tx timeout [ 139.111174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.119020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.144972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.158646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.181160] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.188190] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.198147] device bridge_slave_0 entered promiscuous mode [ 139.205124] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.212501] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.219481] device bridge_slave_0 entered promiscuous mode [ 139.231054] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.238447] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.246652] device bridge_slave_1 entered promiscuous mode [ 139.253663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.295115] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.301749] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.308737] device bridge_slave_1 entered promiscuous mode [ 139.341652] Bluetooth: hci1: command 0x0409 tx timeout [ 139.358177] device hsr_slave_0 entered promiscuous mode [ 139.364629] device hsr_slave_1 entered promiscuous mode [ 139.371128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 139.379911] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.398463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.408084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 139.428822] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.439520] device hsr_slave_0 entered promiscuous mode [ 139.445752] device hsr_slave_1 entered promiscuous mode [ 139.456440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 139.465652] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.493718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 139.508707] Bluetooth: hci2: command 0x0409 tx timeout [ 139.544065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.555413] team0: Port device team_slave_0 added [ 139.567935] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.576361] team0: Port device team_slave_0 added [ 139.597322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.605153] team0: Port device team_slave_1 added [ 139.619065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.625854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.633748] team0: Port device team_slave_1 added [ 139.649941] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.656675] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.661889] Bluetooth: hci3: command 0x0409 tx timeout [ 139.664826] device bridge_slave_0 entered promiscuous mode [ 139.716274] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.723996] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.730967] device bridge_slave_1 entered promiscuous mode [ 139.738462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.745730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.773018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.785818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.807655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.814882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.841558] Bluetooth: hci4: command 0x0409 tx timeout [ 139.846545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.859073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.866596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.892554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.911781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.918030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.943320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.964238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.974716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.981792] Bluetooth: hci5: command 0x0409 tx timeout [ 139.999723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.008189] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.025760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 140.046877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.054927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.066591] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 140.074907] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.081900] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.109502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.139788] device hsr_slave_0 entered promiscuous mode [ 140.146211] device hsr_slave_1 entered promiscuous mode [ 140.172768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 140.194894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 140.205805] device hsr_slave_0 entered promiscuous mode [ 140.215228] device hsr_slave_1 entered promiscuous mode [ 140.226994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.235104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.243228] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.249707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.261168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.276063] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.285735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 140.294707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.303731] team0: Port device team_slave_0 added [ 140.310389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 140.333178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.341239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.351864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.359554] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.366016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.373989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 140.381223] team0: Port device team_slave_1 added [ 140.407955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.414278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.440738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.455421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.464472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.490621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.508832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.527920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.540832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.551905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.568119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 140.578332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.599268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 140.612020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.661577] device hsr_slave_0 entered promiscuous mode [ 140.667288] device hsr_slave_1 entered promiscuous mode [ 140.678578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 140.686581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 140.727447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.735544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.744294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.754705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 140.808287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.820560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 140.857447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.868084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.877826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.886258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.905087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.914046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 140.950017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.957215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.966551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.992809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.000022] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 141.006482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.019876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.027511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.053212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.078400] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 141.098252] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.106581] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.126433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.136112] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.152400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.170925] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 141.177878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.186578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.194349] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.201677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.209717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.216524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.223342] Bluetooth: hci0: command 0x041b tx timeout [ 141.235227] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.248957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.259760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.269972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.278646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.286889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.295048] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.301467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.308575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.325624] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.337714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.348487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.365746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.373855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.380739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.400138] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.407470] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.419181] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 141.427198] Bluetooth: hci1: command 0x041b tx timeout [ 141.436201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.453468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.465313] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 141.472776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.481044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.491210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.499875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.508493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.516792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.527596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.536486] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.547164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.564206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.574510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.584294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.592692] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.599088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.606434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.614683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.622462] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.628823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.635890] Bluetooth: hci2: command 0x041b tx timeout [ 141.643004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 141.653713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.666715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.687186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.695589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 141.706266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.714654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.722588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.729969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.738042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.747278] Bluetooth: hci3: command 0x041b tx timeout [ 141.763473] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.771884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.786730] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 141.794506] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 141.801060] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 141.810256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 141.817369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.825069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.832179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.839959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.847839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.855633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.866387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.876675] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 141.883708] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.893921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.903410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.903619] Bluetooth: hci4: command 0x041b tx timeout [ 141.919465] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 141.928502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.938745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.946977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.954956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.963307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.970854] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.977249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.984365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.991989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.999444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.008015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.015281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.035681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 142.047534] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 142.054856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.061748] Bluetooth: hci5: command 0x041b tx timeout [ 142.079783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.087042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.095311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.103364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.111081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.119237] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.125639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.136013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 142.143914] device veth0_vlan entered promiscuous mode [ 142.151146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.166450] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 142.173418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.180969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.191415] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 142.197442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.212888] device veth1_vlan entered promiscuous mode [ 142.219060] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 142.227902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.236162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.245372] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.256329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.266196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.273486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.282412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.290175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.297536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.307970] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.315657] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.327118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.338891] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 142.355302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.366078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.375744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.386067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.394270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.402446] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.408786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.416185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.424674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.436979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.454952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.466632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.480743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.490742] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.498310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.507078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.515504] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.521952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.528757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.536895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.544392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.553722] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 142.563856] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 142.572302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.581265] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 142.590771] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 142.600816] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.607689] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.614094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.622643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.630196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.638656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.649033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.659590] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 142.670249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.680223] device veth0_macvtap entered promiscuous mode [ 142.687039] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 142.694864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.704125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.711136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.719233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.727079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.734024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.740695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.748671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.756776] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.763188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.770387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.784429] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 142.796810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.806520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.819826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.830962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.841125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 142.853807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.865794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.876899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.885251] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.891677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.898973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.906805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.915896] device veth1_macvtap entered promiscuous mode [ 142.922717] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 142.935357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 142.951208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.962229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.970496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 142.982997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.990337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.013230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.020831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.035604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.043459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.053663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 143.060697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.070597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.077399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.088803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.101977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.109988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.120153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.132849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.143838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.153564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.162446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.170447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.180059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.189175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.197281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.204947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.213030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.222722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.232349] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 143.239353] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 143.246335] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 143.254949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 143.262345] Bluetooth: hci0: command 0x040f tx timeout [ 143.270746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.280669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.299495] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 143.312508] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 143.319497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.328889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.337222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.346103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.354169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.363510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.371965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.378821] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.389719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.399462] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 143.409042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.419628] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 143.429841] device veth0_vlan entered promiscuous mode [ 143.437868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.446888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.455340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.464126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.472966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.480719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.490279] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 143.502436] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.516047] device veth1_vlan entered promiscuous mode [ 143.523152] Bluetooth: hci1: command 0x040f tx timeout [ 143.532103] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.538163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.546218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.553900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.567181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.593110] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 143.607246] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 143.616565] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 143.624979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.634531] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 143.652198] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 143.659344] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 143.666578] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 143.684308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.692636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.700227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.709205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.720322] device veth0_macvtap entered promiscuous mode [ 143.727235] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 143.738791] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 143.742160] Bluetooth: hci2: command 0x040f tx timeout [ 143.752362] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.760097] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 143.776185] device veth1_macvtap entered promiscuous mode [ 143.783934] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 143.790683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.799250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.806815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.813922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.822335] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.831628] Bluetooth: hci3: command 0x040f tx timeout [ 143.839290] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 143.854246] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 143.874469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 143.891080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.899010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.907983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.915045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.922931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.930296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.938547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.947056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.954227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.963705] device veth0_vlan entered promiscuous mode [ 143.993358] Bluetooth: hci4: command 0x040f tx timeout [ 143.997128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.076195] device veth1_vlan entered promiscuous mode [ 144.088861] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 144.097739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 144.122833] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 144.135411] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 144.143193] Bluetooth: hci5: command 0x040f tx timeout [ 144.152439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.163829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.174896] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 144.182655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.192211] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 144.202767] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 144.218330] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 144.228309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.240338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.252228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.260134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.268189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.276331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.289133] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 144.297091] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 144.304062] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 144.312113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.322820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.333276] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 144.340120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.348862] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 144.364804] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 144.378012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.389007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.405797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.414883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.423211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.430870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.454336] device veth0_macvtap entered promiscuous mode [ 144.464324] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 144.477443] device veth1_macvtap entered promiscuous mode [ 144.518248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.528657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.538950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.547098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.559095] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 144.567458] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 144.581803] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 144.595461] device veth0_vlan entered promiscuous mode [ 144.608972] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 144.617032] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 144.624777] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 144.644314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 144.657756] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 144.693256] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 144.699876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.717843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.729677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.739876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.750494] device veth1_vlan entered promiscuous mode [ 144.758622] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 144.767500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 144.775764] device veth0_vlan entered promiscuous mode [ 144.790394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.799495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.807375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.815091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.822517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.839970] device veth0_vlan entered promiscuous mode [ 144.847872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.858235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.868883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 144.878720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.889297] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 144.896757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.908726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.929827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.951913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 144.962434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.975777] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 144.983556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.997553] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 145.006362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.016188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.030014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.040651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.051061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.082772] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 145.093662] device veth1_vlan entered promiscuous mode [ 145.100085] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 145.120653] device veth1_vlan entered promiscuous mode [ 145.127468] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 145.136583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.149375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.177696] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 145.191090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.209067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.220056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.234284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.245977] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 145.256817] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 145.269653] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 145.285938] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 145.293522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.300911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.318587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.329230] device veth0_macvtap entered promiscuous mode [ 145.339021] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 145.345974] Bluetooth: hci0: command 0x0419 tx timeout [ 145.359656] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 145.367283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.376415] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 145.380095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.419139] device veth1_macvtap entered promiscuous mode [ 145.433789] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 145.444493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.457722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.465725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.484554] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 145.493048] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 145.501083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 145.513063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 145.523015] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 145.542536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.551922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.560259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 23:49:31 executing program 0: [ 145.575030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.591620] Bluetooth: hci1: command 0x0419 tx timeout [ 145.599914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 145.622214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.630607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.649500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.676092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.689809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.700328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.710434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.722353] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 145.729405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.745129] device veth0_macvtap entered promiscuous mode [ 145.771987] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 145.781917] device veth0_macvtap entered promiscuous mode [ 145.788429] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 145.812568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.819806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.850713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.858268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.871333] hrtimer: interrupt took 44163 ns [ 145.937766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.949439] Bluetooth: hci2: command 0x0419 tx timeout [ 145.954914] Bluetooth: hci3: command 0x0419 tx timeout 23:49:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 145.988056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.005060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.016406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.026706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.036069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.048618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.063389] Bluetooth: hci4: command 0x0419 tx timeout [ 146.066954] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 146.077192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.104663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.115390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.129555] device veth1_macvtap entered promiscuous mode [ 146.142276] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 146.154222] device veth1_macvtap entered promiscuous mode [ 146.160645] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 146.182375] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 146.190138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.209288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 146.217684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.226284] Bluetooth: hci5: command 0x0419 tx timeout [ 146.261090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 146.277428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.298471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.332609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.343500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 146.356477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 146.374066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.467849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.477180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.492589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.506056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.517682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.530777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.548744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.559944] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready 23:49:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 146.572405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.582708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 23:49:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 146.616383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.631956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.668128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.680041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.690690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.703811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.714500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.726209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.738893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.761800] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 146.778209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.790496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.805389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.830684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.869755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.894469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.934661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.967488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 23:49:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 146.977588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.987023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.012276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.023841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.043514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.067065] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 147.082847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.103154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.124102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.140156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.150804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.166551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.178083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:49:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 147.198942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.209480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.228634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.268797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.280696] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 147.288600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.300153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.335716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.363067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.380564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.624136] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 147.675790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.707160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.772217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.816091] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 147.867177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.917506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.977828] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:49:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0xa20) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1}}], 0x2, 0x0, 0x0) 23:49:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 148.164149] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 148.175899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.183744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.190526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.273127] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 148.287790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.308630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.369815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.422599] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 148.437907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.491031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.505366] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 148.520500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.535839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.561451] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 148.585712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.617663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.632014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.639155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.677224] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 148.704711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.721021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.731877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.752972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:49:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x1fc, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x168, 0x170, 0x170, 0x168, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a9c7a4d9feb4d0907eaf8f9a6370fc30418b12ce8c8dc8a0c793bea20f9"}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x258) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000780)=ANY=[], 0x678) 23:49:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:34 executing program 1: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x92) 23:49:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c", 0x46, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x524}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x40010}) 23:49:34 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x84, 0x13, &(0x7f00000001c0)=ANY=[], 0x68) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 23:49:34 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4f21, 0x0, @remote}, 0x1c) 23:49:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000026000106"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x80000000000001a, 0x40010002, 0x0) [ 148.946929] sg_write: data in/out 3171656/104 bytes for SCSI command 0x0-- guessing data in; [ 148.946929] program syz-executor.1 not setting count and/or reply_len properly 23:49:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:34 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x358, 0xcc, 0xffffffff, 0xffffffff, 0xcc, 0xffffffff, 0x2c4, 0xffffffff, 0xffffffff, 0x2c4, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, {{@uncond, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 149.040458] sg_write: data in/out 3171656/104 bytes for SCSI command 0x0-- guessing data in; [ 149.040458] program syz-executor.1 not setting count and/or reply_len properly [ 149.082141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:49:34 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a66a2f", 0x10, 0x3a, 0x0, @local, @private0, {[], @ni}}}}}, 0x0) 23:49:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:49:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c", 0x46, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:35 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 149.306011] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 149.324027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 149.341053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:49:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="440f20c0350e000000440f22c0450fad8e0a800000f080450097b9800000c00f3235000800000f30480fc79d0400000066baf80cb818dfee86ef66bafc0c66edc744240000000000c744240203000000c7442406000000000f011c24d9f00f21e8b98a0300000f32", 0x68}], 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 149.380447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 149.446196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 23:49:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'geneve0\x00'}, 0x7a, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 23:49:35 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0x0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'geneve0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x6, [0x1c, 0x2b, 0x7, 0x3f, 0x22, 0x28]}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) [ 149.708920] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 149.818483] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 149.842115] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 149.863210] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 23:49:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x41) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20050080, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r1, 0x1) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x40000f4) recvfrom$inet6(r1, &(0x7f00000001c0)=""/220, 0xdc, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) 23:49:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:35 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f9579ff80f98007106de3f8a8cb", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e", @ANYBLOB], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) [ 150.007056] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:49:35 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="440f20c0350e000000440f22c0450fad8e0a800000f080450097b9800000c00f3235000800000f30480fc79d0400000066baf80cb818dfee86ef66bafc0c66edc744240000000000c744240203000000c7442406000000000f011c24d9f00f21e8b98a0300000f32", 0x68}], 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 150.052319] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:49:35 executing program 2: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x92) 23:49:35 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) [ 150.191676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.271871] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.443164] syz-executor.3 (8197) used greatest stack depth: 23104 bytes left [ 150.465296] sg_write: data in/out 3171656/104 bytes for SCSI command 0x0-- guessing data in; [ 150.465296] program syz-executor.2 not setting count and/or reply_len properly 23:49:36 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='user\x00', 0x0, 0xfffffffffffffff9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x84, 0x7b, &(0x7f00000001c0)=ANY=[], 0x68) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 150.503107] overlayfs: filesystem on './file1' not supported as upperdir 23:49:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x1, 0x2) [ 150.643692] sg_write: data in/out 3171656/104 bytes for SCSI command 0x0-- guessing data in; [ 150.643692] program syz-executor.2 not setting count and/or reply_len properly 23:49:36 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000010000)="00400000ec1f00001320000012000000000000000020000000010000611cad49e10000001e000000000000000010ec0302000100526549734572334673", 0x3d, 0x10000}, {&(0x7f0000010e00)="00000000000000000000000012000000000000000020000000010000611cad49e1", 0x21, 0x2012000}], 0x0, &(0x7f0000011100)) 23:49:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:36 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x103000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f9579ff80f98007106de3f8a8cb", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e", @ANYBLOB], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 23:49:36 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x92) 23:49:36 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x68) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 23:49:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f9579ff80f98007106de3f8a8cb", @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) 23:49:36 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="4a465331010000006076000000000000001000002c", 0x15, 0x8000}, {&(0x7f0000010f00)="10c4645f010000000100000001000000040000000b0000000020", 0x1a, 0xb200}], 0x0, &(0x7f0000061000)) [ 151.062521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.097863] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.151938] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 151.160932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.198889] REISERFS (device loop4): using ordered data mode [ 151.225608] ================================================================================ [ 151.234308] UBSAN: Undefined behaviour in fs/jfs/jfs_mount.c:385:25 [ 151.240760] shift exponent 44 is too large for 32-bit type 'int' [ 151.246910] CPU: 0 PID: 8270 Comm: syz-executor.3 Not tainted 4.19.147-syzkaller #0 [ 151.254706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.264058] Call Trace: [ 151.266659] dump_stack+0x22c/0x33e [ 151.270303] ubsan_epilogue+0xe/0x3a [ 151.274050] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 151.280203] ? __bread_gfp+0x81/0x300 [ 151.284041] ? readSuper+0xf2/0x290 [ 151.287682] chkSuper.cold+0x1e/0x98 [ 151.291432] ? readSuper+0x290/0x290 [ 151.295155] ? do_raw_spin_lock+0xcb/0x220 [ 151.299399] jfs_mount+0x47/0x3d0 [ 151.302900] jfs_fill_super+0x55c/0xb50 [ 151.306884] ? parse_options+0xf50/0xf50 [ 151.310956] ? set_blocksize+0x163/0x3f0 [ 151.315032] mount_bdev+0x2fc/0x3b0 [ 151.318668] ? parse_options+0xf50/0xf50 [ 151.320593] reiserfs: using flush barriers [ 151.322736] mount_fs+0xa3/0x318 [ 151.322761] vfs_kern_mount.part.0+0x68/0x470 [ 151.322779] do_mount+0x51c/0x2f10 [ 151.322799] ? check_preemption_disabled+0x41/0x2b0 [ 151.322815] ? copy_mount_string+0x40/0x40 [ 151.322836] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 151.322851] ? _copy_from_user+0xd2/0x130 [ 151.322866] ? copy_mount_options+0x261/0x370 [ 151.322880] ksys_mount+0xcf/0x130 [ 151.322893] __x64_sys_mount+0xba/0x150 [ 151.322908] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 151.322927] do_syscall_64+0xf9/0x670 [ 151.377098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 151.382292] RIP: 0033:0x460bca [ 151.385487] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 151.404396] RSP: 002b:00007f10052d1a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 151.412108] RAX: ffffffffffffffda RBX: 00007f10052d1b20 RCX: 0000000000460bca [ 151.419375] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f10052d1ae0 [ 151.426665] RBP: 00007f10052d1ae0 R08: 00007f10052d1b20 R09: 0000000020000000 [ 151.433932] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 151.441214] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020061000 23:49:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="80810000001806000000655fdd57f25fddf4655f00000000000001002079109f904a", 0x22, 0x1600}], 0x0, &(0x7f0000000040)) 23:49:37 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x73f2) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 151.448513] ================================================================================ [ 151.472762] REISERFS (device loop4): journal params: device loop4, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 0, max trans age 30 [ 151.510317] ================================================================================ [ 151.518926] UBSAN: Undefined behaviour in fs/jfs/jfs_imap.c:458:7 [ 151.525154] shift exponent -32 is negative [ 151.529391] CPU: 0 PID: 8270 Comm: syz-executor.3 Not tainted 4.19.147-syzkaller #0 [ 151.537183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.546535] Call Trace: [ 151.549133] dump_stack+0x22c/0x33e [ 151.552775] ubsan_epilogue+0xe/0x3a [ 151.556501] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 151.562668] ? do_raw_spin_unlock+0x171/0x240 [ 151.567177] diReadSpecial.cold+0x1b/0x3e [ 151.571335] jfs_mount+0x83/0x3d0 [ 151.574458] REISERFS (device loop4): checking transaction log (loop4) [ 151.574796] jfs_fill_super+0x55c/0xb50 [ 151.585354] ? parse_options+0xf50/0xf50 [ 151.589427] ? set_blocksize+0x163/0x3f0 [ 151.593511] mount_bdev+0x2fc/0x3b0 [ 151.597146] ? parse_options+0xf50/0xf50 [ 151.601216] mount_fs+0xa3/0x318 [ 151.604597] vfs_kern_mount.part.0+0x68/0x470 [ 151.609119] do_mount+0x51c/0x2f10 [ 151.612673] ? check_preemption_disabled+0x41/0x2b0 [ 151.617698] ? copy_mount_string+0x40/0x40 [ 151.621945] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 151.626824] ? _copy_from_user+0xd2/0x130 [ 151.630980] ? copy_mount_options+0x261/0x370 [ 151.635486] ksys_mount+0xcf/0x130 [ 151.639735] __x64_sys_mount+0xba/0x150 [ 151.643718] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 151.648311] do_syscall_64+0xf9/0x670 [ 151.652122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 151.657312] RIP: 0033:0x460bca [ 151.660514] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 151.679416] RSP: 002b:00007f10052d1a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 151.687125] RAX: ffffffffffffffda RBX: 00007f10052d1b20 RCX: 0000000000460bca [ 151.694398] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f10052d1ae0 [ 151.701673] RBP: 00007f10052d1ae0 R08: 00007f10052d1b20 R09: 0000000020000000 [ 151.708944] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 151.716216] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020061000 [ 151.723496] ================================================================================ 23:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 151.749312] EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 23:49:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x84, 0x23, &(0x7f00000001c0)=ANY=[], 0x68) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 151.802704] EXT4-fs (loop5): mount failed 23:49:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB]) [ 151.895216] EXT4-fs warning (device loop5): ext4_enable_quotas:5872: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 151.960022] EXT4-fs (loop5): mount failed [ 151.999392] erofs: read_super, device -> /dev/loop1 [ 152.046649] erofs: options -> [ 152.085169] ================================================================================ [ 152.088391] erofs: cannot find valid erofs superblock [ 152.093791] UBSAN: Undefined behaviour in fs/jfs/jfs_imap.c:126:7 [ 152.093800] shift exponent -32 is negative [ 152.093816] CPU: 0 PID: 8270 Comm: syz-executor.3 Not tainted 4.19.147-syzkaller #0 [ 152.093824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.093828] Call Trace: [ 152.093850] dump_stack+0x22c/0x33e [ 152.093872] ubsan_epilogue+0xe/0x3a [ 152.093890] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 152.093907] ? diMount+0x4b/0x860 [ 152.093923] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 152.093939] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 152.093954] ? release_metapage+0x24b/0x9e0 [ 152.093970] diMount.cold+0x17/0x1c [ 152.093982] ? diReadSpecial+0x2ed/0x670 [ 152.094001] jfs_mount+0xbf/0x3d0 [ 152.094018] jfs_fill_super+0x55c/0xb50 [ 152.094034] ? parse_options+0xf50/0xf50 [ 152.094053] ? set_blocksize+0x163/0x3f0 [ 152.094076] mount_bdev+0x2fc/0x3b0 [ 152.094093] ? parse_options+0xf50/0xf50 [ 152.191321] mount_fs+0xa3/0x318 [ 152.194700] vfs_kern_mount.part.0+0x68/0x470 [ 152.199201] do_mount+0x51c/0x2f10 [ 152.202751] ? check_preemption_disabled+0x41/0x2b0 [ 152.207789] ? copy_mount_string+0x40/0x40 [ 152.212052] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 152.216900] ? _copy_from_user+0xd2/0x130 [ 152.221057] ? copy_mount_options+0x261/0x370 [ 152.225556] ksys_mount+0xcf/0x130 [ 152.229113] __x64_sys_mount+0xba/0x150 [ 152.233123] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 152.237715] do_syscall_64+0xf9/0x670 [ 152.241527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.246717] RIP: 0033:0x460bca [ 152.249936] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 152.268866] RSP: 002b:00007f10052d1a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 152.276580] RAX: ffffffffffffffda RBX: 00007f10052d1b20 RCX: 0000000000460bca [ 152.283854] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f10052d1ae0 [ 152.291131] RBP: 00007f10052d1ae0 R08: 00007f10052d1b20 R09: 0000000020000000 [ 152.298402] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 152.305672] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020061000 [ 152.312954] ================================================================================ [ 153.416545] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one -1 [ 153.427126] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 153.438394] REISERFS (device loop4): Remounting filesystem read-only [ 153.445139] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 153.458318] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one -1 [ 153.468622] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 8211. Fsck? 23:49:39 executing program 4: 23:49:39 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x73f2) r2 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 23:49:39 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) listen(0xffffffffffffffff, 0x1ff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) listen(0xffffffffffffffff, 0x73f2) r2 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 23:49:39 executing program 1: 23:49:39 executing program 3: 23:49:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:39 executing program 4: 23:49:39 executing program 3: 23:49:39 executing program 1: 23:49:39 executing program 3: 23:49:39 executing program 4: 23:49:39 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300), 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) listen(0xffffffffffffffff, 0x1ff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) listen(0xffffffffffffffff, 0x73f2) r2 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 23:49:39 executing program 3: 23:49:40 executing program 2: 23:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:40 executing program 1: 23:49:40 executing program 3: 23:49:40 executing program 5: 23:49:40 executing program 4: 23:49:40 executing program 1: 23:49:40 executing program 3: 23:49:40 executing program 5: 23:49:40 executing program 2: 23:49:40 executing program 4: 23:49:40 executing program 4: 23:49:40 executing program 3: 23:49:40 executing program 1: 23:49:40 executing program 2: 23:49:40 executing program 5: 23:49:40 executing program 4: 23:49:40 executing program 3: 23:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:40 executing program 1: 23:49:40 executing program 3: 23:49:40 executing program 4: 23:49:40 executing program 5: 23:49:41 executing program 2: 23:49:41 executing program 1: 23:49:41 executing program 4: 23:49:41 executing program 3: 23:49:41 executing program 5: 23:49:41 executing program 2: 23:49:41 executing program 1: 23:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:41 executing program 4: 23:49:41 executing program 3: 23:49:41 executing program 5: 23:49:41 executing program 2: 23:49:41 executing program 1: 23:49:41 executing program 3: 23:49:41 executing program 4: 23:49:41 executing program 2: 23:49:41 executing program 1: 23:49:41 executing program 5: 23:49:41 executing program 3: 23:49:42 executing program 5: 23:49:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:42 executing program 2: 23:49:42 executing program 1: 23:49:42 executing program 3: 23:49:42 executing program 4: 23:49:42 executing program 1: 23:49:42 executing program 2: 23:49:42 executing program 4: 23:49:42 executing program 3: 23:49:42 executing program 5: 23:49:42 executing program 2: 23:49:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:42 executing program 4: 23:49:42 executing program 3: 23:49:42 executing program 5: 23:49:42 executing program 1: 23:49:42 executing program 2: 23:49:42 executing program 2: 23:49:42 executing program 5: 23:49:42 executing program 1: 23:49:42 executing program 3: 23:49:42 executing program 4: 23:49:42 executing program 1: 23:49:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:43 executing program 2: 23:49:43 executing program 5: 23:49:43 executing program 4: 23:49:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x4d, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, 0x0, 0x0) 23:49:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:43 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) 23:49:43 executing program 2: 23:49:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 23:49:43 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 23:49:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) 23:49:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000240)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000025000911d25a80648c63940d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x18, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c9b841dd673bc0b4d84884366d52660966eb4120ad4aa721b45c2a0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf2521000000050092000300000008009a000000000008009a020000e3e807009a000100d20bd1cc7e91988b00006fb9cf8a45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffe99}}, 0x0) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000088000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d010000080002000600ffffffffffffffe70000000000000000e413d27ba2f07b490bbdff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453b33b04730d32ab8f80cdca97d66f1dec5298bc27f6a2a6aac8a3107c53dee0195c63d08d9b15235b0c566ff71bc8cab337d5549ade3dea4902b82000000000700792714515c4"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8001}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 23:49:43 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x12e681, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000040)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="00404e47b2b2b1d61e26c57800000c000200000005462200360065000076630800aec1290604299078e0000001"]}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2081fe) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 23:49:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x83, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 157.858893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62615 sclass=netlink_route_socket pid=8556 comm=syz-executor.1 23:49:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) [ 157.913155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8563 comm=syz-executor.1 [ 157.915942] audit: type=1400 audit(1600991383.595:9): avc: denied { create } for pid=8561 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 23:49:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) [ 157.960348] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 23:49:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) [ 158.128880] audit: type=1400 audit(1600991383.655:10): avc: denied { name_bind } for pid=8561 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 158.215281] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 158.255093] 8021q: adding VLAN 0 to HW filter on device bond1 23:49:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 158.344454] bond1: The slave device specified does not support setting the MAC address [ 158.390368] audit: type=1400 audit(1600991383.655:11): avc: denied { node_bind } for pid=8561 comm="syz-executor.4" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 23:49:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) write$dsp(r0, 0x0, 0x0) 23:49:44 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060000000000001c0000000000", @ANYRES32, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 158.615859] audit: type=1400 audit(1600991383.675:12): avc: denied { name_connect } for pid=8561 comm="syz-executor.4" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 23:49:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) write$dsp(r0, 0x0, 0x0) [ 158.728332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62615 sclass=netlink_route_socket pid=8626 comm=syz-executor.1 23:49:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x4d, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) [ 158.802858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8633 comm=syz-executor.1 23:49:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) write$dsp(r0, 0x0, 0x0) [ 158.953240] nla_parse: 1 callbacks suppressed [ 158.953253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 23:49:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x4d, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, 0x0, 0x0) 23:49:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:44 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100706c7567"], 0x3c}}, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) [ 159.084003] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 159.090448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.100104] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 23:49:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x4c, 0x0, 0xd8, 0xd8, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 23:49:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80585414, &(0x7f0000000180)=""/154) [ 159.222770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.231915] xt_ecn: cannot match TCP bits for non-tcp packets 23:49:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:45 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 23:49:45 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040), 0x14) pipe(&(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 23:49:45 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x166142, 0x0) sendfile(r0, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 23:49:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) [ 159.596277] audit: type=1800 audit(1600991385.275:13): pid=8715 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15866 res=0 [ 159.654688] audit: type=1800 audit(1600991385.335:14): pid=8717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15866 res=0 23:49:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0xfffffe00, 0x7ff, 0x9, 0x7fff}, 0x10) r1 = memfd_create(&(0x7f0000000180)='\x10\x01\x00t\t-\x81E\xb67\x92^\xd4\x81E\xb3-1\xa6)\x99+/\xdf\x80\x00\x00\x00Hc\x9ag\x8f\xa3\xae\x0e\xad\x8d\xcc\x00\x00\x00', 0x0) ioperm(0xba3c, 0x0, 0x4) pwritev(r1, &(0x7f0000000980)=[{&(0x7f00000004c0)="8d57ec69b731336d9882498fea0c29850eaff25b88f1c9ec5e797da56cccad89735ef0d5eddb9269c88b2caa3f936c2eae27b17fd2f6a6ec5e12e5558673893f2866fff45c4cdfef85f0ecaed01057ab9f5f946e3be262995c39244273937550d8730f4c5caa422ead8bebda8548682ea79a3b4a4568c199443082f54a54e05150bd97fbeeed936f6d017d64a2821383262b077ed4", 0x95}, {&(0x7f0000000580)="3db6189eda170a92fab0b0952f922b1e28a06dd7b5a0a26cb99e736cd175568be4558cf1a6c08999372517978a6640c72ea6dc58986d9e59e8a9baa2f367fa3525209deec9ba1fb31b90f23e5b5e11368d2315d7d38a546afc7a337c4323fd54a2f27ba86dcdc9a8243157bac7481060e9999ae73519927dc3561acea6da3282a29b70e916f97a87944e", 0x8a}, {&(0x7f0000000000)="d1225fd04697b63909de5e8949ac6559e8e574fb0abc0d", 0x17}, {&(0x7f0000000640)="2c8caa02362082d40cea43ad87bdfeae1544438466727d60d19631fea372fc6d5d1b66a82d1801b751406cf8e71f87d4c542429b3bcdef870b6c5d238771263bdcfd1d817b6c0ecdec2e95dc8772a636b2330596b7ea9be878915317662a585cf1c789c32976d111114128e558a51fea8ab676fd4ade125a21", 0x79}, {&(0x7f0000000700)="9ad1c3b5ef2ef3a58672336927f4650f174708e1d00dc0eec56c79253d638306abab810d64edc9da7cb8619be3b0370c3b3ed59060311208be8a2d46439e672008ecfbdd49138c0ecc707e87faf21d6115", 0x51}], 0x5, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0xd00}, 0x0, {}, 0xff0f0000, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) pipe(0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x19b, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000340)={0x1, 0x0, [], {0x0, @bt={0x0, 0x9, 0x1, 0x2, 0x8, 0x3, 0x5, 0x80000000, 0xfffffd7c, 0x5, 0x200, 0x6, 0x0, 0x101, 0xa, 0x27, {0x2, 0x1}, 0x7, 0x1f}}}) 23:49:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x166142, 0x0) sendfile(r0, r4, 0x0, 0x80001d00c0d0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) 23:49:45 executing program 5: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 23:49:45 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000280)={0x0, "bf9f8598c886e810a4f16450d7046ea211c98ca4da9f2dd1e9190eee7ba27ca4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce39}) fallocate(r1, 0x4, 0x9, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0) [ 159.797010] audit: type=1800 audit(1600991385.395:15): pid=8717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15884 res=0 23:49:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) [ 159.894016] audit: type=1800 audit(1600991385.405:16): pid=8717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15884 res=0 [ 159.957051] print_req_error: I/O error, dev loop0, sector 0 [ 159.963312] Buffer I/O error on dev loop0, logical block 0, async page read [ 159.969344] audit: type=1800 audit(1600991385.545:17): pid=8733 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15862 res=0 [ 159.972373] print_req_error: I/O error, dev loop0, sector 0 [ 159.995735] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.005730] print_req_error: I/O error, dev loop0, sector 0 [ 160.011597] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.021129] print_req_error: I/O error, dev loop0, sector 0 [ 160.027022] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.034374] audit: type=1800 audit(1600991385.565:18): pid=8733 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15862 res=0 23:49:45 executing program 5: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) 23:49:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:49:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) [ 160.053859] print_req_error: I/O error, dev loop0, sector 0 [ 160.059592] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.069105] ldm_validate_partition_table(): Disk read failed. [ 160.155748] print_req_error: I/O error, dev loop0, sector 0 [ 160.161555] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.169962] print_req_error: I/O error, dev loop0, sector 0 [ 160.175792] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.184993] print_req_error: I/O error, dev loop0, sector 0 [ 160.190720] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.199315] print_req_error: I/O error, dev loop0, sector 0 [ 160.205120] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.212536] Dev loop0: unable to read RDB block 0 [ 160.263030] print_req_error: I/O error, dev loop0, sector 0 [ 160.268799] Buffer I/O error on dev loop0, logical block 0, async page read [ 160.278472] loop0: unable to read partition table [ 160.285637] loop0: partition table beyond EOD, truncated [ 160.291828] loop_reread_partitions: partition scan of loop0 (JpfQT)[qZ;(q-M) failed (rc=-5) 23:49:46 executing program 5: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) [ 160.396711] ldm_validate_partition_table(): Disk read failed. [ 160.449281] Dev loop0: unable to read RDB block 0 [ 160.484771] loop0: unable to read partition table [ 160.511114] loop0: partition table beyond EOD, truncated 23:49:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) [ 160.806592] ldm_validate_partition_table(): Disk read failed. [ 160.830477] Dev loop0: unable to read RDB block 0 [ 160.875775] loop0: unable to read partition table [ 160.899176] loop0: partition table beyond EOD, truncated [ 160.936507] loop_reread_partitions: partition scan of loop0 (JpfQT)[qZ;(q-M) failed (rc=-5) 23:49:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="02"], 0x3c}}, 0x0) 23:49:46 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)}) 23:49:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) 23:49:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x5) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000900)="53595a4b414c4c455220200862c19fb8f23db30000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffff0000ffffffff46494c4530", 0x48, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)={[{@fat=@codepage={'codepage', 0x3d, '865'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 23:49:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 23:49:46 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000f, 0x13, r0, 0x0) write$dsp(r0, 0x0, 0x0) 23:49:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 161.079180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.