[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.359879][ T27] audit: type=1800 audit(1576120898.182:25): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.379631][ T27] audit: type=1800 audit(1576120898.182:26): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.432243][ T27] audit: type=1800 audit(1576120898.182:27): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. 2019/12/12 03:21:47 fuzzer started 2019/12/12 03:21:49 dialing manager at 10.128.0.26:42497 2019/12/12 03:21:49 syscalls: 2701 2019/12/12 03:21:49 code coverage: enabled 2019/12/12 03:21:49 comparison tracing: enabled 2019/12/12 03:21:49 extra coverage: enabled 2019/12/12 03:21:49 setuid sandbox: enabled 2019/12/12 03:21:49 namespace sandbox: enabled 2019/12/12 03:21:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 03:21:49 fault injection: enabled 2019/12/12 03:21:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 03:21:49 net packet injection: enabled 2019/12/12 03:21:49 net device setup: enabled 2019/12/12 03:21:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 03:21:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:23:37 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f000020e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 03:23:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1d4c, 0x4815, 0x0, 0x0) syzkaller login: [ 180.071393][ T9014] IPVS: ftp: loaded support on port[0] = 21 [ 180.186086][ T9016] IPVS: ftp: loaded support on port[0] = 21 03:23:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800010000000003d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r1) [ 180.284526][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 180.427148][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.435483][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.454600][ T9014] device bridge_slave_0 entered promiscuous mode [ 180.491545][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 180.503202][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.510356][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.533695][ T9014] device bridge_slave_1 entered promiscuous mode 03:23:38 executing program 3: fanotify_init(0x54, 0x0) [ 180.578326][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.605056][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.642223][ T9020] IPVS: ftp: loaded support on port[0] = 21 [ 180.706685][ T9014] team0: Port device team_slave_0 added [ 180.726987][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.734790][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.743400][ T9016] device bridge_slave_0 entered promiscuous mode [ 180.755093][ T9014] team0: Port device team_slave_1 added [ 180.780832][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.789256][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.798303][ T9016] device bridge_slave_1 entered promiscuous mode 03:23:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000680)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x5, 0x6}) [ 180.896468][ T9014] device hsr_slave_0 entered promiscuous mode [ 180.952968][ T9014] device hsr_slave_1 entered promiscuous mode [ 181.027665][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.116945][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.152387][ T9022] IPVS: ftp: loaded support on port[0] = 21 03:23:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x2, &(0x7f0000000040)=@raw=[@map_val], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 181.168244][ T9020] chnl_net:caif_netlink_parms(): no params data found [ 181.177970][ T9025] IPVS: ftp: loaded support on port[0] = 21 [ 181.310219][ T9016] team0: Port device team_slave_0 added [ 181.362953][ T9016] team0: Port device team_slave_1 added [ 181.371176][ T9014] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.415331][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.422418][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.430515][ T9020] device bridge_slave_0 entered promiscuous mode [ 181.439285][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.446428][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.455774][ T9020] device bridge_slave_1 entered promiscuous mode [ 181.516039][ T9016] device hsr_slave_0 entered promiscuous mode [ 181.574525][ T9016] device hsr_slave_1 entered promiscuous mode [ 181.642811][ T9016] debugfs: Directory 'hsr0' with parent '/' already present! [ 181.651054][ T9014] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.696214][ T9014] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.776976][ T9027] IPVS: ftp: loaded support on port[0] = 21 [ 181.798075][ T9014] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.849114][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.865351][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.915949][ T9020] team0: Port device team_slave_0 added [ 181.959362][ T9020] team0: Port device team_slave_1 added [ 181.979394][ T9016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.036062][ T9016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.094311][ T9025] chnl_net:caif_netlink_parms(): no params data found [ 182.143203][ T9016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.216390][ T9020] device hsr_slave_0 entered promiscuous mode [ 182.253035][ T9020] device hsr_slave_1 entered promiscuous mode [ 182.292763][ T9020] debugfs: Directory 'hsr0' with parent '/' already present! [ 182.329493][ T9016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.410846][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.418679][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.426528][ T9025] device bridge_slave_0 entered promiscuous mode [ 182.461211][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.469210][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.477090][ T9025] device bridge_slave_1 entered promiscuous mode [ 182.504840][ T9020] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.565343][ T9020] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.605274][ T9022] chnl_net:caif_netlink_parms(): no params data found [ 182.639933][ T9020] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.707677][ T9020] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.779379][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.799439][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.882109][ T9025] team0: Port device team_slave_0 added [ 182.888238][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.895981][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.904211][ T9022] device bridge_slave_0 entered promiscuous mode [ 182.924399][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.933148][ T9025] team0: Port device team_slave_1 added [ 182.939259][ T9027] chnl_net:caif_netlink_parms(): no params data found [ 182.960925][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.968519][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.977700][ T9022] device bridge_slave_1 entered promiscuous mode [ 183.025889][ T9022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.094696][ T9025] device hsr_slave_0 entered promiscuous mode [ 183.133092][ T9025] device hsr_slave_1 entered promiscuous mode [ 183.172703][ T9025] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.193492][ T9022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.218694][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.227458][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.249051][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.257616][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.265292][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.273862][ T9027] device bridge_slave_0 entered promiscuous mode [ 183.283329][ T9022] team0: Port device team_slave_0 added [ 183.289246][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.297828][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.306482][ T9027] device bridge_slave_1 entered promiscuous mode [ 183.345027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.353857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.362210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.369416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.377740][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.386946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.395598][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.402718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.410334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.421396][ T9022] team0: Port device team_slave_1 added [ 183.452250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.461039][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.535992][ T9022] device hsr_slave_0 entered promiscuous mode [ 183.583193][ T9022] device hsr_slave_1 entered promiscuous mode [ 183.643455][ T9022] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.653077][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.666109][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.694412][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.705338][ T9025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.759645][ T9025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.808823][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.817531][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.827257][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.836036][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.844567][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.862446][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.890694][ T9025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.924319][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.932059][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.939980][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.948308][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.957351][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.968469][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.982371][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.998737][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.012261][ T9027] team0: Port device team_slave_0 added [ 184.020250][ T9025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.061346][ T9027] team0: Port device team_slave_1 added [ 184.084204][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.092221][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.100192][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.108900][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.118111][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.125324][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.134655][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.151571][ T9022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.205771][ T9022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.246435][ T9020] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.306203][ T9027] device hsr_slave_0 entered promiscuous mode [ 184.343135][ T9027] device hsr_slave_1 entered promiscuous mode [ 184.383434][ T9027] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.404458][ T9022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.464539][ T9022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.535658][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.545154][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.555024][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.563462][ T2734] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.570521][ T2734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.578459][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.586317][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.630998][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.645050][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.654801][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.661918][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.670365][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.680282][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.704929][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.714451][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.723338][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.731825][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.744058][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.755672][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.821855][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.837209][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.847714][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.854817][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.863303][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.871046][ T9036] mmap: syz-executor.0 (9036) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 184.872131][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.891989][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.908677][ T9016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.920349][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.938533][ T9027] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.966517][ T9027] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.019764][ T9027] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.084204][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.091184][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.099647][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.107951][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:23:42 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.148790][ T9027] netdevsim netdevsim5 netdevsim3: renamed from eth3 03:23:43 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.201935][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.221447][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:23:43 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.251688][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.270480][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.279521][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 03:23:43 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.296287][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.313592][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.330158][ T9020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.344851][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.372464][ T9025] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.390662][ T9022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.406476][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 03:23:43 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.430390][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.439946][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.448433][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:23:43 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.480100][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.501745][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.545389][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.566597][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.582409][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 03:23:43 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) [ 185.613667][ T3213] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.620770][ T3213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.635677][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.645202][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.654416][ T3213] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.661495][ T3213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.693016][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.722741][ T9022] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.779879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.787907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.796427][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.804813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.816522][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.824326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.831870][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.840541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.848929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.857719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.866105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.874539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.883965][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.892281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.901361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.938700][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.965630][ T9025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.984342][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.999970][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.008710][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.016066][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.024306][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.041565][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.050356][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.057478][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.065118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.074034][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.093035][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.101195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.110320][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.119563][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.128787][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.163044][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.171016][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.184522][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.193204][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.201492][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.216184][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 03:23:44 executing program 1: [ 186.281394][ T9027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.301998][ T9025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.354073][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.361568][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.390198][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.398828][ T9028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.429551][ T9022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.452451][ T9027] 8021q: adding VLAN 0 to HW filter on device team0 03:23:44 executing program 2: [ 186.478552][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.494734][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.530270][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.548043][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.556958][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.564106][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.578001][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.587858][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.601383][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.608531][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.647057][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.663652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.685557][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.697762][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.706643][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.723257][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.731118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 03:23:44 executing program 3: [ 186.740440][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.749435][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.758779][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.774186][ T9027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.789020][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.812690][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.821204][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 03:23:44 executing program 1: [ 186.863529][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.871042][ T3432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.897725][ T9027] 8021q: adding VLAN 0 to HW filter on device batadv0 03:23:44 executing program 5: 03:23:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:44 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 03:23:44 executing program 2: 03:23:44 executing program 0: keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:44 executing program 1: 03:23:45 executing program 1: 03:23:45 executing program 2: 03:23:45 executing program 0: keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:45 executing program 5: 03:23:45 executing program 3: 03:23:45 executing program 0: keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:45 executing program 2: 03:23:45 executing program 1: 03:23:45 executing program 5: 03:23:45 executing program 3: 03:23:45 executing program 2: 03:23:45 executing program 1: 03:23:45 executing program 5: 03:23:45 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:45 executing program 3: 03:23:45 executing program 2: 03:23:45 executing program 1: 03:23:45 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:45 executing program 4: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:45 executing program 5: 03:23:45 executing program 2: 03:23:45 executing program 3: 03:23:46 executing program 1: 03:23:46 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:46 executing program 4: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:46 executing program 5: 03:23:46 executing program 2: 03:23:46 executing program 3: 03:23:46 executing program 1: 03:23:46 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:46 executing program 4: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:46 executing program 5: 03:23:46 executing program 3: 03:23:46 executing program 2: 03:23:46 executing program 1: 03:23:46 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:46 executing program 5: 03:23:46 executing program 3: 03:23:46 executing program 2: 03:23:46 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:46 executing program 1: 03:23:46 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:46 executing program 5: 03:23:46 executing program 3: 03:23:46 executing program 1: 03:23:46 executing program 2: 03:23:46 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:47 executing program 3: 03:23:47 executing program 5: 03:23:47 executing program 2: 03:23:47 executing program 1: 03:23:47 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000002700)) 03:23:47 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:47 executing program 3: 03:23:47 executing program 5: 03:23:47 executing program 2: 03:23:47 executing program 1: 03:23:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, 0x0) 03:23:47 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:47 executing program 2: 03:23:47 executing program 5: 03:23:47 executing program 1: 03:23:47 executing program 3: 03:23:47 executing program 0: add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:47 executing program 5: 03:23:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, 0x0) 03:23:47 executing program 1: 03:23:47 executing program 2: 03:23:47 executing program 3: 03:23:47 executing program 5: 03:23:47 executing program 1: 03:23:47 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x4, 0x0, 0x0) 03:23:47 executing program 2: 03:23:48 executing program 3: 03:23:48 executing program 1: 03:23:48 executing program 5: 03:23:48 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:48 executing program 3: 03:23:48 executing program 2: 03:23:48 executing program 4: 03:23:48 executing program 1: 03:23:48 executing program 3: 03:23:48 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) request_key(&(0x7f0000000980)='keyring\x00', &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:48 executing program 2: 03:23:48 executing program 5: 03:23:48 executing program 4: 03:23:48 executing program 1: 03:23:48 executing program 2: 03:23:48 executing program 3: 03:23:48 executing program 5: 03:23:48 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(0x0, &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:48 executing program 4: 03:23:48 executing program 1: 03:23:48 executing program 3: 03:23:48 executing program 4: 03:23:48 executing program 5: 03:23:48 executing program 2: 03:23:48 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(0x0, &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:48 executing program 3: 03:23:49 executing program 1: 03:23:49 executing program 4: 03:23:49 executing program 2: 03:23:49 executing program 5: 03:23:49 executing program 3: 03:23:49 executing program 4: 03:23:49 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(0x0, &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 03:23:49 executing program 1: 03:23:49 executing program 2: 03:23:49 executing program 5: 03:23:49 executing program 4: 03:23:49 executing program 1: 03:23:49 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) 03:23:49 executing program 2: 03:23:49 executing program 3: 03:23:49 executing program 1: 03:23:49 executing program 4: 03:23:49 executing program 2: 03:23:49 executing program 5: 03:23:49 executing program 3: 03:23:49 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) 03:23:49 executing program 4: 03:23:49 executing program 1: 03:23:49 executing program 5: 03:23:49 executing program 2: 03:23:49 executing program 0: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x8202006) request_key(&(0x7f0000000980)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) 03:23:49 executing program 3: 03:23:49 executing program 1: 03:23:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000004ff0)={0x0, 0x0}, 0x10) 03:23:50 executing program 5: msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) 03:23:50 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 03:23:50 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 03:23:50 executing program 3: 03:23:50 executing program 1: 03:23:50 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000ac0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000440)='cpuseEV._ms\x00P\xae)\x1dvj\x1c\x15H\xe8|\x03\xa9\x9c\xc8$\x9c1Kq\x1aNN\x99\xce>\xd7\xb6\vQ\x84\x1eo\f)\xbf},\x8a?\xb6\xe9\x12\x85f\xc9\x99\x1e\xe9Rd\x82n\xa8\x106\x03uTbz(:\x89\xf3\xe1\xaf\xb2\xf3\x02\xcf\\p\xe3\xddF\xd6\x9c0\xf4P\x00q', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='mory.[vents\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8ca5f78ff127f6c5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf1624b0eba06ec4a86e8f32e00586f9835b3e0000aeaa790000f8de84c5e2", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) 03:23:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x8080a, 0x0) gettid() keyctl$chown(0x4, 0x0, 0x0, 0x0) getegid() sendmmsg$unix(r0, &(0x7f0000000900)=[{0x0, 0x0, 0x0}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x32, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004940), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 03:23:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 03:23:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d20010002f000080", 0x14}], 0x1}, 0x0) 03:23:50 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000040)=ANY=[@ANYBLOB='2']) [ 192.551521][ C1] hrtimer: interrupt took 56775 ns 03:23:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00\xb80xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1}}}, 0x32) close(r1) [ 193.396541][ T9483] EXT4-fs (sda1): Unrecognized mount option "2" or missing value 03:23:51 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000ac0), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000440)='cpuseEV._ms\x00P\xae)\x1dvj\x1c\x15H\xe8|\x03\xa9\x9c\xc8$\x9c1Kq\x1aNN\x99\xce>\xd7\xb6\vQ\x84\x1eo\f)\xbf},\x8a?\xb6\xe9\x12\x85f\xc9\x99\x1e\xe9Rd\x82n\xa8\x106\x03uTbz(:\x89\xf3\xe1\xaf\xb2\xf3\x02\xcf\\p\xe3\xddF\xd6\x9c0\xf4P\x00q', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='mory.[vents\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8ca5f78ff127f6c5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf1624b0eba06ec4a86e8f32e00586f9835b3e0000aeaa790000f8de84c5e2", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) 03:23:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x377) 03:23:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00\xb80xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1}}}, 0x32) close(r1) 03:23:51 executing program 5: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1}}}, 0x32) close(r1) 03:23:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) 03:23:51 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000040)=ANY=[@ANYBLOB='2']) 03:23:51 executing program 1: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4001, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1}}}, 0x32) close(r1) 03:23:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1d4c, 0x4832, 0x0, 0x0) 03:23:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) [ 194.229545][ T9538] EXT4-fs (sda1): Unrecognized mount option "2" or missing value 03:23:52 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 03:23:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4004ae8b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 03:23:52 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 03:23:52 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00\xb80xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @mcast1}}}, 0x32) close(r1) 03:23:52 executing program 5: syz_genetlink_get_family_id$nbd(0x0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000b80)=@xdp={0x2c, 0x2, 0x0, 0x1f}, 0x100000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6f) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffaccd311f49335aa97b3dcf322a", @ANYRES32=r5], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 194.525973][ T9568] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 03:23:52 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00\xb8next should be ffff8880900e1510, but was ffff8880a5694970 [ 194.734635][ T9562] ------------[ cut here ]------------ [ 194.740112][ T9562] kernel BUG at lib/list_debug.c:51! [ 194.745498][ T9562] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 194.751555][ T9562] CPU: 1 PID: 9562 Comm: syz-executor.1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 194.761346][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.771416][ T9562] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 194.777741][ T9562] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 194.797408][ T9562] RSP: 0018:ffffc900012a7c00 EFLAGS: 00010282 [ 194.803500][ T9562] RAX: 0000000000000054 RBX: ffff8880a568e080 RCX: 0000000000000000 [ 194.811508][ T9562] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000254f72 [ 194.819512][ T9562] RBP: ffffc900012a7c18 R08: 0000000000000054 R09: ffffed1015d26621 [ 194.827535][ T9562] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8880a568e180 [ 194.835505][ T9562] R13: ffff8880a5694970 R14: ffff8880900e1510 R15: ffff8880900e1510 [ 194.843569][ T9562] FS: 00000000021bb940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 194.852613][ T9562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.859182][ T9562] CR2: 00007f1d43e52000 CR3: 00000000966a8000 CR4: 00000000001426e0 [ 194.867135][ T9562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.875089][ T9562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.883159][ T9562] Call Trace: [ 194.886440][ T9562] __dentry_kill+0x1fd/0x600 [ 194.891016][ T9562] ? dput+0x38/0xe10 [ 194.894888][ T9562] ? dput+0x38/0xe10 [ 194.898757][ T9562] dput+0x62f/0xe10 [ 194.902606][ T9562] simple_recursive_removal+0x5bc/0x6d0 [ 194.908137][ T9562] ? debugfs_rename+0x7f0/0x7f0 [ 194.912985][ T9562] debugfs_remove+0x5e/0x80 [ 194.917480][ T9562] kvm_put_kvm+0x136/0xcc0 [ 194.921884][ T9562] ? kvm_irqfd_release+0xe2/0x120 [ 194.926918][ T9562] ? kvm_irqfd_release+0xe2/0x120 [ 194.931920][ T9562] kvm_vm_release+0x44/0x60 [ 194.936403][ T9562] __fput+0x2ff/0x890 [ 194.940366][ T9562] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 194.945289][ T9562] ____fput+0x16/0x20 [ 194.949257][ T9562] task_work_run+0x145/0x1c0 [ 194.953827][ T9562] exit_to_usermode_loop+0x316/0x380 [ 194.959100][ T9562] do_syscall_64+0x676/0x790 [ 194.963693][ T9562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.969561][ T9562] RIP: 0033:0x4144a1 [ 194.973432][ T9562] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 194.993028][ T9562] RSP: 002b:00007ffd413e8c90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 195.001425][ T9562] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144a1 [ 195.009392][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 195.017356][ T9562] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9 [ 195.025316][ T9562] R10: 00007ffd413e8d70 R11: 0000000000000293 R12: 000000000075c9a0 [ 195.033265][ T9562] R13: 000000000075c9a0 R14: 0000000000760510 R15: 000000000075bfd4 [ 195.041230][ T9562] Modules linked in: [ 195.045333][ T9562] ---[ end trace 3b8247a1d39a123d ]--- [ 195.050806][ T9562] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 195.057265][ T9562] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 195.076893][ T9562] RSP: 0018:ffffc900012a7c00 EFLAGS: 00010282 [ 195.082977][ T9562] RAX: 0000000000000054 RBX: ffff8880a568e080 RCX: 0000000000000000 [ 195.090953][ T9562] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000254f72 [ 195.098968][ T9562] RBP: ffffc900012a7c18 R08: 0000000000000054 R09: ffffed1015d26621 [ 195.106960][ T9562] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8880a568e180 [ 195.114964][ T9562] R13: ffff8880a5694970 R14: ffff8880900e1510 R15: ffff8880900e1510 [ 195.122961][ T9562] FS: 00000000021bb940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 195.131969][ T9562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.138666][ T9562] CR2: 00007f1d43e52000 CR3: 00000000966a8000 CR4: 00000000001426e0 [ 195.146674][ T9562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.154672][ T9562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.162663][ T9562] Kernel panic - not syncing: Fatal exception [ 195.170123][ T9562] Kernel Offset: disabled [ 195.174452][ T9562] Rebooting in 86400 seconds..