[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. 2020/05/23 08:50:40 fuzzer started 2020/05/23 08:50:41 dialing manager at 10.128.0.26:38661 2020/05/23 08:50:41 syscalls: 3055 2020/05/23 08:50:41 code coverage: enabled 2020/05/23 08:50:41 comparison tracing: enabled 2020/05/23 08:50:41 extra coverage: enabled 2020/05/23 08:50:41 setuid sandbox: enabled 2020/05/23 08:50:41 namespace sandbox: enabled 2020/05/23 08:50:41 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/23 08:50:41 fault injection: enabled 2020/05/23 08:50:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/23 08:50:41 net packet injection: enabled 2020/05/23 08:50:41 net device setup: enabled 2020/05/23 08:50:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/23 08:50:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/23 08:50:41 USB emulation: enabled 08:52:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syzkaller login: [ 189.854653][ T6808] IPVS: ftp: loaded support on port[0] = 21 [ 189.977121][ T6808] chnl_net:caif_netlink_parms(): no params data found 08:52:54 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) [ 190.054890][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.062563][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.072221][ T6808] device bridge_slave_0 entered promiscuous mode [ 190.086267][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.093464][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.101864][ T6808] device bridge_slave_1 entered promiscuous mode [ 190.132568][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.144606][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.197016][ T6808] team0: Port device team_slave_0 added [ 190.217233][ T6808] team0: Port device team_slave_1 added [ 190.265295][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.272250][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.314826][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.328586][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.334666][ T6954] IPVS: ftp: loaded support on port[0] = 21 [ 190.336673][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.369309][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 08:52:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) [ 190.488447][ T6808] device hsr_slave_0 entered promiscuous mode [ 190.575231][ T6808] device hsr_slave_1 entered promiscuous mode [ 190.715762][ T6990] IPVS: ftp: loaded support on port[0] = 21 [ 190.830813][ T6954] chnl_net:caif_netlink_parms(): no params data found 08:52:55 executing program 3: socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) accept(r0, &(0x7f00000002c0)=@x25, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44035) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r1, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@x25, 0x0) geteuid() r2 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0200000001000000000000", @ANYBLOB, @ANYBLOB="7457d3e98f30e8a7fb53f8adf3f81002abda9e0cc85b08455a74fbffffffa1ad8fca759b6a67248bf31b082f2b7411d48cf53efcc302ffa57f636fd6", @ANYRES32=r2, @ANYBLOB="040000000700", @ANYRES32=0x0], 0x8, 0x0) r3 = socket$inet6(0xa, 0x803, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 191.157645][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.165144][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.173435][ T6954] device bridge_slave_0 entered promiscuous mode [ 191.198284][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 191.210333][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.237380][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.245998][ T6954] device bridge_slave_1 entered promiscuous mode [ 191.263234][ T7191] IPVS: ftp: loaded support on port[0] = 21 [ 191.275816][ T6808] netdevsim netdevsim0 netdevsim0: renamed from eth0 08:52:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x15, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0) [ 191.356577][ T6808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.398039][ T6808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.479258][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.506478][ T6808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.573192][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.624208][ T6954] team0: Port device team_slave_0 added 08:52:56 executing program 5: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000440)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x23) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x200004) [ 191.676690][ T6954] team0: Port device team_slave_1 added [ 191.732308][ T7276] IPVS: ftp: loaded support on port[0] = 21 [ 191.837856][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.848841][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.858781][ T6990] device bridge_slave_0 entered promiscuous mode [ 191.910146][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.920217][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.930909][ T6990] device bridge_slave_1 entered promiscuous mode [ 191.948270][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.957332][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.987120][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.094229][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.106659][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.136841][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.235261][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.248041][ T7335] IPVS: ftp: loaded support on port[0] = 21 [ 192.340978][ T6954] device hsr_slave_0 entered promiscuous mode [ 192.386571][ T6954] device hsr_slave_1 entered promiscuous mode [ 192.424903][ T6954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.432672][ T6954] Cannot create hsr debugfs directory [ 192.440698][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.476289][ T6990] team0: Port device team_slave_0 added [ 192.505650][ T6990] team0: Port device team_slave_1 added [ 192.527566][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.535740][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 192.603988][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.612971][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.622196][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.630028][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.656927][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.696675][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.703649][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.732002][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.748919][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.817320][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.824477][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.834080][ T7191] device bridge_slave_0 entered promiscuous mode [ 192.877553][ T6990] device hsr_slave_0 entered promiscuous mode [ 192.915133][ T6990] device hsr_slave_1 entered promiscuous mode [ 192.954855][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.962426][ T6990] Cannot create hsr debugfs directory [ 192.977741][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.987764][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.997195][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.004324][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.016540][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.023597][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.033391][ T7191] device bridge_slave_1 entered promiscuous mode [ 193.065526][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.073597][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.083920][ T2486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.093605][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.100736][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.213622][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.228310][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.238185][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.266446][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.275834][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.301033][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.333381][ T7191] team0: Port device team_slave_0 added [ 193.347120][ T7191] team0: Port device team_slave_1 added [ 193.368844][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.380574][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.393041][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.422798][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 193.445401][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 193.483398][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.491250][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.519592][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.568134][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.577283][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.588598][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.596343][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.623948][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.727903][ T7191] device hsr_slave_0 entered promiscuous mode [ 193.765274][ T7191] device hsr_slave_1 entered promiscuous mode [ 193.804773][ T7191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.812385][ T7191] Cannot create hsr debugfs directory [ 193.819242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.827785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.857634][ T6954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.913217][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.956800][ T6954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.014523][ T6954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.064579][ T6954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.121984][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.132105][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.142068][ T7276] device bridge_slave_0 entered promiscuous mode [ 194.151339][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.158847][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.169984][ T7335] device bridge_slave_0 entered promiscuous mode [ 194.198788][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.207429][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.216106][ T7276] device bridge_slave_1 entered promiscuous mode [ 194.238922][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.249289][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.257789][ T7335] device bridge_slave_1 entered promiscuous mode [ 194.298777][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.316634][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.329281][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.345075][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.412488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.421942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.434991][ T6990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.470126][ T6990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.542116][ T7335] team0: Port device team_slave_0 added [ 194.550852][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.563869][ T6990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.634227][ T7276] team0: Port device team_slave_0 added [ 194.647482][ T7335] team0: Port device team_slave_1 added [ 194.656546][ T7276] team0: Port device team_slave_1 added [ 194.686005][ T6990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.778803][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.793428][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.823423][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.831108][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.857649][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.873503][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.881425][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.909173][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.928451][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.936039][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.964391][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.999700][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.007753][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.034739][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.129524][ T7276] device hsr_slave_0 entered promiscuous mode [ 195.175421][ T7276] device hsr_slave_1 entered promiscuous mode [ 195.224805][ T7276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.232416][ T7276] Cannot create hsr debugfs directory [ 195.253881][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.266151][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.274798][ T7191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.307693][ T7191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.370877][ T7191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.430975][ T7191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.489284][ T6808] device veth0_vlan entered promiscuous mode [ 195.558568][ T7335] device hsr_slave_0 entered promiscuous mode [ 195.617276][ T7335] device hsr_slave_1 entered promiscuous mode [ 195.674846][ T7335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.682490][ T7335] Cannot create hsr debugfs directory [ 195.689791][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.698276][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.781612][ T6808] device veth1_vlan entered promiscuous mode [ 195.850704][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.966329][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.973644][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.984316][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.993110][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.001971][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.034297][ T6808] device veth0_macvtap entered promiscuous mode [ 196.055757][ T6808] device veth1_macvtap entered promiscuous mode [ 196.084857][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.093046][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.101850][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.111550][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.121810][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.129155][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.137338][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.146226][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.154726][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.161773][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.170622][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.194778][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.255058][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.261947][ T7276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.343731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.377622][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.386201][ T7276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.447712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.458445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.467661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.476948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.486062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.494953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.503742][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.533419][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.542754][ T7276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.587870][ T7276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.656186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.669593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.678638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.691068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.700788][ T7335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.741055][ T7335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.798244][ T7335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.857601][ T7335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.934008][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.944045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.954043][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.969096][ T6954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.981240][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.011109][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.024383][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.033172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.041739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.050655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.059724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.067003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.138886][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.147358][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.156189][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.164789][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.172866][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.181183][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.203408][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.232080][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.241651][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.252814][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.261873][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.272338][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.379402][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.401047][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.410706][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.419989][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.428907][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.438452][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.445714][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.573482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.585709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.598148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.623869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.641708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.652383][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 08:53:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x81}) [ 197.668049][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.669169][ T8063] syz-executor.0 (8063) used greatest stack depth: 22976 bytes left [ 197.675224][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.677554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 08:53:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200001a0, 0x18, &(0x7f0000000140)={@flat=@handle, @fda={0x73622a85}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x2, 0x0, 0x0}) [ 197.771913][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.787835][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.801422][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.814442][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.829266][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.843761][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.867690][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.887368][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.899095][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.932253][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.942532][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.953059][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.967792][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.984264][ T8078] binder: 8072:8078 ioctl c0306201 20000240 returned -14 [ 197.993521][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.005360][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 08:53:02 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) tgkill(0x0, 0x0, 0x0) [ 198.073824][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.092946][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.104469][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.113822][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.123797][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.137888][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.157314][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.207857][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.263359][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.279388][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.288639][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.300346][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.325858][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.332944][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.355397][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.376106][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.385042][ T2483] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.392120][ T2483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.400713][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.408821][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.416851][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.462352][ T6954] device veth0_vlan entered promiscuous mode [ 198.491773][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.500966][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.511464][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.523619][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.534321][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.543859][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.556791][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.575158][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.584112][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.610340][ T6954] device veth1_vlan entered promiscuous mode [ 198.633058][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.662742][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.672799][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.684164][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.696102][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.705920][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.714600][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.721680][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.731480][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.740755][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.755561][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.807188][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.816049][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.827218][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.836604][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.843688][ T8061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.856042][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.865764][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.875254][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.883759][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.895153][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 08:53:03 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) tgkill(0x0, 0x0, 0x0) [ 198.903651][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.913630][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.923420][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.984048][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.033439][ T6954] device veth0_macvtap entered promiscuous mode [ 199.067868][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.087069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.122511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.145498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.154088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.176910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.190834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.200902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.238024][ T6954] device veth1_macvtap entered promiscuous mode [ 199.277542][ C0] hrtimer: interrupt took 45016 ns [ 199.313959][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.329012][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.339742][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.348069][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.357454][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.366830][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.375934][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.384930][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.393532][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.403065][ T6990] device veth0_vlan entered promiscuous mode 08:53:04 executing program 0: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) tgkill(0x0, 0x0, 0x0) [ 199.420236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.446025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.460774][ T7191] device veth0_vlan entered promiscuous mode [ 199.510614][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.533227][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.567173][ T6990] device veth1_vlan entered promiscuous mode [ 199.593155][ T7191] device veth1_vlan entered promiscuous mode [ 199.606604][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.618005][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.635283][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.653009][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.669732][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.683213][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.708794][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.738401][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.779199][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.791621][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.814857][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.841790][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.889158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.898321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.918438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.935781][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.948029][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.960073][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.987497][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.996480][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.033761][ T7191] device veth0_macvtap entered promiscuous mode [ 200.070685][ T6990] device veth0_macvtap entered promiscuous mode [ 200.086138][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.097668][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.107738][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.117852][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 08:53:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}, 0xb}, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 200.143038][ T7191] device veth1_macvtap entered promiscuous mode [ 200.172895][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.197988][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.215519][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.311028][ T6990] device veth1_macvtap entered promiscuous mode [ 200.346548][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 08:53:04 executing program 0: [ 200.357444][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.366813][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.443359][ T7335] device veth0_vlan entered promiscuous mode [ 200.466101][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.474403][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.490903][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.511056][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.524357][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.542613][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.562247][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.617617][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.639449][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.662660][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.687051][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.707125][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.717999][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.733225][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.745182][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.756322][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.777565][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.797400][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.810516][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.819680][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.838732][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.856246][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.866743][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.877774][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.890764][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.450149][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.458019][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.295437][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.666206][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.939399][ T7335] device veth1_vlan entered promiscuous mode [ 211.953888][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.971575][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.980895][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.998091][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.024195][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 08:53:16 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) [ 212.049642][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.069477][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.080404][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.093046][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.130924][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.155926][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.194968][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.203284][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.224414][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.232239][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.364170][ T7276] device veth0_vlan entered promiscuous mode [ 212.375087][ T7335] device veth0_macvtap entered promiscuous mode [ 212.395728][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.404868][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.451488][ T7276] device veth1_vlan entered promiscuous mode [ 212.514563][ T7335] device veth1_macvtap entered promiscuous mode [ 212.533234][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.548811][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.588644][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.763502][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.807377][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.845135][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.881048][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.954661][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.051227][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.155998][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.215008][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.223358][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 08:53:17 executing program 0: [ 213.268393][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.308787][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.354284][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.364137][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 08:53:17 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) [ 213.396821][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.415705][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.450377][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.476318][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.488639][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.501038][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.520126][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.539590][ T2478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.600579][ T7276] device veth0_macvtap entered promiscuous mode [ 216.353193][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.360625][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.234582][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.605413][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.876403][ T7276] device veth1_macvtap entered promiscuous mode [ 224.909661][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.919404][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.066208][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.077596][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.089009][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.105727][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.116797][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.128883][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.142219][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.142386][ T28] audit: type=1800 audit(1590224009.674:2): pid=8154 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15758 res=0 [ 225.165052][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.187198][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.201653][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.219438][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.230524][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.245509][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.259663][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.270960][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.282417][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.294336][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.304389][ T2483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.368240][ T28] audit: type=1800 audit(1590224009.904:3): pid=8154 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15758 res=0 08:53:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x15, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0) 08:53:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 08:53:30 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) 08:53:30 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) 08:53:30 executing program 3: 08:53:30 executing program 5: 08:53:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x15, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0) 08:53:30 executing program 5: 08:53:30 executing program 5: 08:53:30 executing program 3: 08:53:30 executing program 2: 08:53:30 executing program 5: 08:53:31 executing program 4: 08:53:31 executing program 3: [ 229.088880][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.096223][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.962692][ T8178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.303766][ T8178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 08:53:42 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="00042dbd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fcffff000400000008000100fd05ffff"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x40014) 08:53:42 executing program 5: 08:53:42 executing program 2: 08:53:42 executing program 3: 08:53:42 executing program 4: 08:53:42 executing program 0: 08:53:42 executing program 5: 08:53:42 executing program 4: 08:53:42 executing program 2: 08:53:42 executing program 3: 08:53:42 executing program 3: 08:53:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) [ 238.122581][ T8225] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 238.139461][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 238.162916][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.180371][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.188565][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 08:53:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window, @window={0x3, 0x0, 0x477d}, @sack_perm], 0x20000029) 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) poll(&(0x7f0000000040)=[{r3, 0x1140}, {}, {r2, 0x40}, {r2}], 0x4, 0x0) 08:53:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 08:53:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000017000101030000000000000004000000100011800c"], 0x24}}, 0x0) 08:53:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getegid() 08:53:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0x0) sendmmsg$unix(r0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20}], 0x1, 0x0) [ 238.650181][ T8247] FAT-fs (loop2): bogus number of FAT sectors [ 238.664235][ T8247] FAT-fs (loop2): Can't find a valid FAT filesystem 08:53:43 executing program 3: open(0x0, 0x141042, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 08:53:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_delete(0x0) 08:53:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0), 0xe) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 238.763053][ T8247] FAT-fs (loop2): bogus number of FAT sectors 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) [ 238.808174][ T8247] FAT-fs (loop2): Can't find a valid FAT filesystem 08:53:43 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) socket$inet(0x2, 0x0, 0x0) 08:53:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8, 0x0) 08:53:43 executing program 2: clock_getres(0xd581c2bc35688739, 0x0) 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000280)=""/163) 08:53:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 08:53:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$unix(r0, &(0x7f0000003880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}], 0x1, 0x0) [ 239.102387][ T8289] FAT-fs (loop5): bogus number of FAT sectors [ 239.143263][ T8289] FAT-fs (loop5): Can't find a valid FAT filesystem 08:53:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) [ 239.256120][ T8289] FAT-fs (loop5): bogus number of FAT sectors [ 239.315806][ T8289] FAT-fs (loop5): Can't find a valid FAT filesystem 08:53:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 08:53:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) [ 239.522969][ T8327] FAT-fs (loop5): bogus number of FAT sectors [ 239.529249][ T8327] FAT-fs (loop5): Can't find a valid FAT filesystem [ 239.669056][ T8327] FAT-fs (loop5): bogus number of FAT sectors [ 239.675404][ T8327] FAT-fs (loop5): Can't find a valid FAT filesystem 08:53:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x0, 0x0) 08:53:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) 08:53:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:44 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 08:53:44 executing program 5: semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:44 executing program 2: semop(0x0, &(0x7f0000000200), 0x57) 08:53:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20}], 0x1, 0x0) 08:53:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0xfffffffffffffffd}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x9b) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)="e669", 0x2}]) io_submit(0x0, 0x0, &(0x7f0000000480)) socket$inet(0x2, 0x2, 0x0) 08:53:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000440)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d9007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) 08:53:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_robust_list(&(0x7f0000000100), 0x18) 08:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) [ 240.285558][ T8370] FAT-fs (loop2): bogus number of FAT sectors [ 240.302667][ T8370] FAT-fs (loop2): Can't find a valid FAT filesystem 08:53:45 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 08:53:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:45 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010045) 08:53:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x14107e, 0x0) write$binfmt_elf32(r3, &(0x7f0000000cc0)=ANY=[], 0x801) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) 08:53:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:45 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x1018040, 0x0) [ 241.077028][ T8397] FAT-fs (loop1): bogus number of FAT sectors [ 241.083714][ T8397] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="1ce7", 0x2) 08:53:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 08:53:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000140)="73844ae89d", 0x5}]) 08:53:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:45 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(r2, 0x0, 0x0, 0x0) 08:53:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:45 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) [ 241.874451][ T28] audit: type=1804 audit(1590224026.406:4): pid=8432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir492836895/syzkaller.5YouDK/11/file0/file0" dev="sda1" ino=15790 res=1 [ 241.902651][ T28] audit: type=1804 audit(1590224026.436:5): pid=8434 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir492836895/syzkaller.5YouDK/11/file0/file0" dev="sda1" ino=15790 res=1 [ 241.925899][ T8431] FAT-fs (loop1): bogus number of FAT sectors [ 241.932444][ T8431] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:46 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:46 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:46 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0xdd58184251b33872, 0x0) 08:53:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[], 0xc6) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) 08:53:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}, {0x0, 0x0, 0x5fdc}, {&(0x7f0000000300)="5098d031f67d4c27433591715e", 0xd, 0x400}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) 08:53:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:46 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:46 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:46 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) [ 242.221209][ T8442] FAT-fs (loop2): bogus number of FAT sectors [ 242.236629][ T8442] FAT-fs (loop2): Can't find a valid FAT filesystem 08:53:46 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:46 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:46 executing program 5: semtimedop(0x0, 0x0, 0x0, 0x0) getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:53:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) [ 242.379881][ T8464] FAT-fs (loop1): bogus number of FAT sectors [ 242.387440][ T8442] FAT-fs (loop2): bogus number of FAT sectors [ 242.408257][ T8464] FAT-fs (loop1): Can't find a valid FAT filesystem [ 242.415822][ T8442] FAT-fs (loop2): Can't find a valid FAT filesystem 08:53:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) [ 243.130331][ T8464] FAT-fs (loop1): bogus number of FAT sectors [ 243.136691][ T8464] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setuid(r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x0, 0x1, {r4}, {r6}, 0x3f1e, 0x3}) 08:53:47 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x283) 08:53:47 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:47 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:47 executing program 5: socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mkdir(0x0, 0x0) 08:53:47 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x283) 08:53:48 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setuid(r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x0, 0x1, {r4}, {r6}, 0x3f1e, 0x3}) 08:53:48 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x283) 08:53:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:48 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setuid(r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x0, 0x1, {r4}, {r6}, 0x3f1e, 0x3}) 08:53:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0xc6) 08:53:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:48 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setuid(r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x0, 0x1, {r4}, {r6}, 0x3f1e, 0x3}) 08:53:48 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:48 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setuid(r7) 08:53:48 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) [ 244.358470][ T8568] FAT-fs (loop5): bogus number of FAT sectors [ 244.397174][ T8568] FAT-fs (loop5): Can't find a valid FAT filesystem 08:53:49 executing program 5: 08:53:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:49 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:49 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) 08:53:49 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) 08:53:49 executing program 5: 08:53:49 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) 08:53:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:49 executing program 5: 08:53:49 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:49 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setuid(0x0) 08:53:49 executing program 5: 08:53:49 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:49 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:49 executing program 5: 08:53:49 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setuid(0x0) 08:53:49 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:49 executing program 5: 08:53:49 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 5: 08:53:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:50 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:50 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setuid(0x0) 08:53:50 executing program 5: 08:53:50 executing program 0: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0xc6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setuid(r6) 08:53:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:50 executing program 5: 08:53:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:50 executing program 5: 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setuid(r6) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:50 executing program 5: 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setuid(r6) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 5: 08:53:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setuid(r6) 08:53:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:50 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:50 executing program 5: 08:53:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setuid(r6) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:51 executing program 5: 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setuid(r5) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 5: 08:53:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x283) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setuid(r5) 08:53:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 5: 08:53:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getpid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setuid(r4) 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 5: 08:53:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:51 executing program 5: 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setuid(r4) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:51 executing program 5: 08:53:51 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setuid(r4) 08:53:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x0) 08:53:52 executing program 5: 08:53:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setuid(r4) 08:53:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:52 executing program 5: 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, 0x0, 0x0, 0x0) 08:53:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x41) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:52 executing program 5: 08:53:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, 0x0, 0x0, 0x0) 08:53:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:52 executing program 5: 08:53:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(0x0, 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, 0x0, 0x0, 0x0) 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:52 executing program 5: 08:53:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0), 0x0, 0x0) 08:53:52 executing program 5: 08:53:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:52 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0), 0x0, 0x0) 08:53:53 executing program 5: 08:53:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r0, 0x0, 0x283) 08:53:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:53 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0), 0x0, 0x0) 08:53:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:53 executing program 5: 08:53:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 08:53:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setuid(r1) 08:53:53 executing program 5: 08:53:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 08:53:54 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:54 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setuid(r1) 08:53:54 executing program 5: 08:53:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') preadv(r3, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0) 08:53:54 executing program 5: 08:53:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x283) 08:53:54 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setuid(r1) 08:53:54 executing program 4: 08:53:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:54 executing program 5: 08:53:55 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) 08:53:55 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:55 executing program 4: 08:53:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:55 executing program 5: 08:53:55 executing program 5: 08:53:55 executing program 4: 08:53:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:55 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b61, &(0x7f0000000080)) 08:53:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:55 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 08:53:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 08:53:55 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x283) 08:53:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x0) 08:53:56 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:56 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x0) 08:53:56 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 08:53:56 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)) 08:53:56 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0x0) 08:53:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, 0x0) 08:53:56 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:57 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:57 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/131, 0x83}, {0x0}, {&(0x7f0000000740)=""/99, 0x63}], 0x6, &(0x7f0000000a80)=""/39, 0x27}}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000b40)=""/6, 0x6}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0x4ac}, {{&(0x7f0000000f80)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/20, 0x14}], 0x1, &(0x7f0000001080)=""/152, 0x98}}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000002340)=""/234, 0xea}], 0x2}}, {{&(0x7f0000001bc0)=@tipc, 0x80, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000002100)=""/164, 0xa4}, {&(0x7f00000021c0)=""/45, 0x2d}, {&(0x7f0000002200)=""/168, 0xa8}], 0x4, &(0x7f0000002300)=""/29, 0x1d}, 0x3f}], 0x7, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) 08:53:57 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 08:53:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, 0x0) 08:53:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:57 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r0, 0x4b61, 0x0) 08:53:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:57 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) 08:53:58 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) open(0x0, 0x0, 0x0) 08:53:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/131, 0x83}, {0x0}, {&(0x7f0000000740)=""/99, 0x63}], 0x6, &(0x7f0000000a80)=""/39, 0x27}}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000b40)=""/6, 0x6}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0x4ac}, {{&(0x7f0000000f80)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/20, 0x14}], 0x1, &(0x7f0000001080)=""/152, 0x98}}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001240)=""/170, 0xaa}, {&(0x7f0000002340)=""/234, 0xea}], 0x2}}, {{&(0x7f0000001bc0)=@tipc, 0x80, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000002100)=""/164, 0xa4}, {&(0x7f00000021c0)=""/45, 0x2d}, {&(0x7f0000002200)=""/168, 0xa8}], 0x4, &(0x7f0000002300)=""/29, 0x1d}, 0x3f}], 0x7, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8), 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) 08:53:58 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)) 08:53:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:58 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) dup2(r0, r1) 08:53:58 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r3) 08:53:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x130) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 08:53:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 254.355057][ T9061] input: syz0 as /devices/virtual/input/input5 [ 254.384800][ T9058] ================================================================== [ 254.393267][ T9058] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 254.400478][ T9058] Read of size 8 at addr ffff88805f8d4150 by task syz-executor.0/9058 [ 254.408628][ T9058] [ 254.410969][ T9058] CPU: 1 PID: 9058 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 254.420772][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.430838][ T9058] Call Trace: [ 254.434279][ T9058] dump_stack+0x18f/0x20d [ 254.438658][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 254.443498][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 254.448440][ T9058] print_address_description.constprop.0.cold+0xd3/0x413 [ 254.455550][ T9058] ? cdev_device_del+0x69/0x80 [ 254.460378][ T9058] ? joydev_disconnect+0x3d/0xb0 [ 254.465364][ T9058] ? __input_unregister_device+0x1b0/0x430 [ 254.471162][ T9058] ? input_unregister_device+0xb4/0xf0 [ 254.476666][ T9058] ? uinput_destroy_device+0x1e2/0x240 [ 254.482296][ T9058] ? vprintk_func+0x97/0x1a6 [ 254.486879][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 254.491743][ T9058] kasan_report.cold+0x1f/0x37 [ 254.496496][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 254.501346][ T9058] __mutex_lock+0x1033/0x13c0 [ 254.506023][ T9058] ? joydev_cleanup+0x21/0x190 [ 254.510811][ T9058] ? print_usage_bug+0x240/0x240 [ 254.515762][ T9058] ? trace_hardirqs_off+0x50/0x220 [ 254.520874][ T9058] ? mutex_trylock+0x2c0/0x2c0 [ 254.525638][ T9058] ? mark_held_locks+0x9f/0xe0 [ 254.530411][ T9058] ? kfree+0x1eb/0x2b0 [ 254.534478][ T9058] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 254.540510][ T9058] ? kfree_const+0x51/0x60 [ 254.544919][ T9058] ? joydev_cleanup+0x21/0x190 [ 254.549667][ T9058] joydev_cleanup+0x21/0x190 [ 254.554246][ T9058] joydev_disconnect+0x45/0xb0 [ 254.559021][ T9058] __input_unregister_device+0x1b0/0x430 [ 254.564648][ T9058] input_unregister_device+0xb4/0xf0 [ 254.570042][ T9058] uinput_destroy_device+0x1e2/0x240 [ 254.575339][ T9058] ? uinput_destroy_device+0x240/0x240 [ 254.580810][ T9058] uinput_release+0x37/0x50 [ 254.585304][ T9058] __fput+0x33e/0x880 [ 254.589403][ T9058] task_work_run+0xf4/0x1b0 [ 254.593920][ T9058] exit_to_usermode_loop+0x2fa/0x360 [ 254.599195][ T9058] do_syscall_64+0x6b1/0x7d0 [ 254.603774][ T9058] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.609665][ T9058] RIP: 0033:0x416621 [ 254.613546][ T9058] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 254.633227][ T9058] RSP: 002b:00007ffe5f229f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 254.641647][ T9058] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621 [ 254.649622][ T9058] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004 [ 254.657581][ T9058] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 254.665539][ T9058] R10: 00007ffe5f22a070 R11: 0000000000000293 R12: 0000000000793438 [ 254.673496][ T9058] R13: 000000000003e1c1 R14: ffffffffffffffff R15: 000000000078bf0c [ 254.682174][ T9058] [ 254.684490][ T9058] Allocated by task 9061: [ 254.688810][ T9058] save_stack+0x1b/0x40 [ 254.692953][ T9058] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 254.698591][ T9058] kmem_cache_alloc_trace+0x153/0x7d0 [ 254.703962][ T9058] joydev_connect+0x83/0xd2f [ 254.708540][ T9058] input_attach_handler+0x194/0x200 [ 254.713738][ T9058] input_register_device.cold+0xf5/0x246 [ 254.719381][ T9058] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 254.725420][ T9058] ksys_ioctl+0x11a/0x180 [ 254.729741][ T9058] __x64_sys_ioctl+0x6f/0xb0 [ 254.734334][ T9058] do_syscall_64+0xf6/0x7d0 [ 254.738820][ T9058] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.744690][ T9058] [ 254.747029][ T9058] Freed by task 9058: [ 254.750995][ T9058] save_stack+0x1b/0x40 [ 254.755131][ T9058] __kasan_slab_free+0xf7/0x140 [ 254.759964][ T9058] kfree+0x109/0x2b0 [ 254.763913][ T9058] device_release+0x71/0x200 [ 254.768502][ T9058] kobject_put+0x1c8/0x2f0 [ 254.772920][ T9058] cdev_device_del+0x69/0x80 [ 254.777497][ T9058] joydev_disconnect+0x3d/0xb0 [ 254.782250][ T9058] __input_unregister_device+0x1b0/0x430 [ 254.787868][ T9058] input_unregister_device+0xb4/0xf0 [ 254.793141][ T9058] uinput_destroy_device+0x1e2/0x240 [ 254.798428][ T9058] uinput_release+0x37/0x50 [ 254.802943][ T9058] __fput+0x33e/0x880 [ 254.806928][ T9058] task_work_run+0xf4/0x1b0 [ 254.811420][ T9058] exit_to_usermode_loop+0x2fa/0x360 [ 254.817660][ T9058] do_syscall_64+0x6b1/0x7d0 [ 254.822244][ T9058] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 254.828112][ T9058] [ 254.830427][ T9058] The buggy address belongs to the object at ffff88805f8d4000 [ 254.830427][ T9058] which belongs to the cache kmalloc-8k of size 8192 [ 254.844559][ T9058] The buggy address is located 336 bytes inside of [ 254.844559][ T9058] 8192-byte region [ffff88805f8d4000, ffff88805f8d6000) [ 254.857908][ T9058] The buggy address belongs to the page: [ 254.863549][ T9058] page:ffffea00017e3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00017e3500 order:2 compound_mapcount:0 compound_pincount:0 [ 254.878804][ T9058] flags: 0xfffe0000010200(slab|head) [ 254.884077][ T9058] raw: 00fffe0000010200 ffffea000147f008 ffffea0001618408 ffff8880aa0021c0 [ 254.892660][ T9058] raw: 0000000000000000 ffff88805f8d4000 0000000100000001 0000000000000000 [ 254.901229][ T9058] page dumped because: kasan: bad access detected [ 254.907636][ T9058] [ 254.909943][ T9058] Memory state around the buggy address: [ 254.915572][ T9058] ffff88805f8d4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.923617][ T9058] ffff88805f8d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.931676][ T9058] >ffff88805f8d4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.939732][ T9058] ^ [ 254.946405][ T9058] ffff88805f8d4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 08:53:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) [ 254.954474][ T9058] ffff88805f8d4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.962513][ T9058] ================================================================== [ 254.970568][ T9058] Disabling lock debugging due to kernel taint 08:53:59 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0)="595f4fe5c8db10a5", 0x0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) readv(r0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x100000000000002d) 08:53:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00', 0x4}) process_vm_readv(0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000002540), 0x0, 0x0) open(0x0, 0x481, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0xc, 0x800, 0x5, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}]}, 0x48}}, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 08:53:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:53:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:53:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setuid(r2) [ 255.166942][ T9079] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 255.208217][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.218349][ T9058] Kernel panic - not syncing: panic_on_warn set ... [ 255.224959][ T9058] CPU: 1 PID: 9058 Comm: syz-executor.0 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 255.236137][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.246176][ T9058] Call Trace: [ 255.249455][ T9058] dump_stack+0x18f/0x20d [ 255.253788][ T9058] ? __mutex_lock+0xf50/0x13c0 [ 255.258993][ T9058] panic+0x2e3/0x75c [ 255.262889][ T9058] ? __warn_printk+0xf3/0xf3 [ 255.267500][ T9058] ? preempt_schedule_common+0x5e/0xc0 [ 255.272959][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 255.277819][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 255.282651][ T9058] ? preempt_schedule_thunk+0x16/0x18 [ 255.288003][ T9058] ? trace_hardirqs_on+0x55/0x230 [ 255.293022][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 255.297849][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 255.302682][ T9058] end_report+0x4d/0x53 [ 255.306818][ T9058] kasan_report.cold+0xd/0x37 [ 255.311501][ T9058] ? __mutex_lock+0x1033/0x13c0 [ 255.316347][ T9058] __mutex_lock+0x1033/0x13c0 [ 255.321699][ T9058] ? joydev_cleanup+0x21/0x190 [ 255.326440][ T9058] ? print_usage_bug+0x240/0x240 [ 255.331357][ T9058] ? trace_hardirqs_off+0x50/0x220 [ 255.336445][ T9058] ? mutex_trylock+0x2c0/0x2c0 [ 255.341211][ T9058] ? mark_held_locks+0x9f/0xe0 [ 255.346062][ T9058] ? kfree+0x1eb/0x2b0 [ 255.350208][ T9058] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 255.356717][ T9058] ? kfree_const+0x51/0x60 [ 255.361133][ T9058] ? joydev_cleanup+0x21/0x190 [ 255.365908][ T9058] joydev_cleanup+0x21/0x190 [ 255.370478][ T9058] joydev_disconnect+0x45/0xb0 [ 255.375221][ T9058] __input_unregister_device+0x1b0/0x430 [ 255.380949][ T9058] input_unregister_device+0xb4/0xf0 [ 255.386327][ T9058] uinput_destroy_device+0x1e2/0x240 [ 255.392548][ T9058] ? uinput_destroy_device+0x240/0x240 [ 255.397988][ T9058] uinput_release+0x37/0x50 [ 255.402470][ T9058] __fput+0x33e/0x880 [ 255.406448][ T9058] task_work_run+0xf4/0x1b0 [ 255.410936][ T9058] exit_to_usermode_loop+0x2fa/0x360 [ 255.416209][ T9058] do_syscall_64+0x6b1/0x7d0 [ 255.420774][ T9058] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 255.426642][ T9058] RIP: 0033:0x416621 [ 255.430517][ T9058] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 255.450109][ T9058] RSP: 002b:00007ffe5f229f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 255.458582][ T9058] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416621 [ 255.466533][ T9058] RDX: 0000000000000000 RSI: 00000000000000d0 RDI: 0000000000000004 [ 255.474498][ T9058] RBP: 0000000000000001 R08: 00000000551800d0 R09: 00000000551800d4 [ 255.482537][ T9058] R10: 00007ffe5f22a070 R11: 0000000000000293 R12: 0000000000793438 [ 255.490487][ T9058] R13: 000000000003e1c1 R14: ffffffffffffffff R15: 000000000078bf0c [ 255.499795][ T9058] Kernel Offset: disabled [ 255.504160][ T9058] Rebooting in 86400 seconds..