[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. 2020/05/24 19:43:50 fuzzer started 2020/05/24 19:43:51 dialing manager at 10.128.0.26:41203 2020/05/24 19:43:51 syscalls: 2953 2020/05/24 19:43:51 code coverage: enabled 2020/05/24 19:43:51 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/05/24 19:43:51 extra coverage: enabled 2020/05/24 19:43:51 setuid sandbox: enabled 2020/05/24 19:43:51 namespace sandbox: enabled 2020/05/24 19:43:51 Android sandbox: enabled 2020/05/24 19:43:51 fault injection: enabled 2020/05/24 19:43:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 19:43:51 net packet injection: enabled 2020/05/24 19:43:51 net device setup: enabled 2020/05/24 19:43:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 19:43:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 19:43:51 USB emulation: /dev/raw-gadget does not exist 19:45:48 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) tkill(0x0, 0xa) syzkaller login: [ 206.737822][ T32] audit: type=1400 audit(1590349548.373:8): avc: denied { execmem } for pid=8811 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 207.053968][ T8812] IPVS: ftp: loaded support on port[0] = 21 [ 207.288657][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 207.538274][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.546098][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.555422][ T8812] device bridge_slave_0 entered promiscuous mode [ 207.569666][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.577201][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.586488][ T8812] device bridge_slave_1 entered promiscuous mode [ 207.632161][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.647024][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.697886][ T8812] team0: Port device team_slave_0 added [ 207.709447][ T8812] team0: Port device team_slave_1 added [ 207.750384][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.757805][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.784022][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.800757][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.808677][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.834781][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.930337][ T8812] device hsr_slave_0 entered promiscuous mode [ 208.033472][ T8812] device hsr_slave_1 entered promiscuous mode [ 208.529411][ T8812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.578481][ T8812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.631298][ T8812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.880981][ T8812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.275396][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.308841][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.318108][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.338543][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.359110][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.369170][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.378563][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.385842][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.459671][ T8812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.470635][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.485867][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.495198][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.504895][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.514288][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.521599][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.530652][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.541582][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.552508][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.562861][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.573125][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.583347][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.595056][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.604570][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.614797][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.624303][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.642207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.651675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.679152][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.687233][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.710338][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.751445][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.761763][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.805427][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.815163][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.834808][ T8812] device veth0_vlan entered promiscuous mode [ 209.853367][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.862476][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.877926][ T8812] device veth1_vlan entered promiscuous mode [ 209.929266][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.938942][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.948407][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.958298][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.977008][ T8812] device veth0_macvtap entered promiscuous mode [ 209.993491][ T8812] device veth1_macvtap entered promiscuous mode [ 210.030138][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.038210][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.047561][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.056900][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.066796][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.089346][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.112869][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.122807][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.582071][ C1] hrtimer: interrupt took 113634 ns [ 210.701448][ T9038] xt_CT: No such helper "netbios-ns" [ 210.869191][ T9038] xt_CT: No such helper "netbios-ns" 19:45:52 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) tkill(0x0, 0xa) [ 211.156310][ T9050] xt_CT: No such helper "netbios-ns" 19:45:52 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) tkill(0x0, 0xa) [ 211.481834][ T9058] xt_CT: No such helper "netbios-ns" 19:45:53 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) tkill(0x0, 0xa) [ 211.774319][ T9068] xt_CT: No such helper "netbios-ns" 19:45:53 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) [ 212.104829][ T9075] xt_CT: No such helper "netbios-ns" 19:45:53 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) [ 212.396760][ T9085] xt_CT: No such helper "netbios-ns" 19:45:54 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) [ 212.636402][ T9092] xt_CT: No such helper "netbios-ns" 19:45:54 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) [ 212.866180][ T9102] xt_CT: No such helper "netbios-ns" 19:45:54 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) socket$inet6(0xa, 0x3, 0x0) 19:45:54 executing program 1: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x17c, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) r1 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x6}, 0x8) tkill(0x0, 0xa) [ 213.177481][ T9113] xt_CT: No such helper "netbios-ns" 19:45:54 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x0) [ 213.508619][ T9125] IPVS: ftp: loaded support on port[0] = 21 19:45:55 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') socket$inet6(0xa, 0x3, 0x0) [ 213.866525][ T9125] chnl_net:caif_netlink_parms(): no params data found 19:45:55 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0x10, 0x4, 0x2) socket$inet6(0xa, 0x3, 0x0) [ 214.118656][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.126064][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.136187][ T9125] device bridge_slave_0 entered promiscuous mode [ 214.167284][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.175468][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.184766][ T9125] device bridge_slave_1 entered promiscuous mode 19:45:55 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) socket$inet6(0xa, 0x3, 0x0) [ 214.279571][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.307975][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.390686][ T9125] team0: Port device team_slave_0 added [ 214.418383][ T9125] team0: Port device team_slave_1 added [ 214.467139][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.475108][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.501268][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.518102][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.525354][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.551510][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 19:45:56 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) [ 214.649835][ T9125] device hsr_slave_0 entered promiscuous mode [ 214.683016][ T9125] device hsr_slave_1 entered promiscuous mode [ 214.737119][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.744908][ T9125] Cannot create hsr debugfs directory 19:45:56 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) [ 215.110653][ T9125] netdevsim netdevsim1 netdevsim0: renamed from eth0 19:45:56 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x3, 0x0) [ 215.161164][ T9125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.243333][ T9125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.289890][ T9125] netdevsim netdevsim1 netdevsim3: renamed from eth3 19:45:57 executing program 0: ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000400)="e1ce641d32557a4c814e4d7b2027fc9bc713") socket$inet6(0xa, 0x3, 0x0) [ 215.579979][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.620481][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.629605][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.659593][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.701366][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.711315][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.721657][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.728991][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.792849][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.801879][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.811715][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.820968][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.828599][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state 19:45:57 executing program 0: socket$inet6(0xa, 0x3, 0x0) [ 215.839253][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.850035][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.860877][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.871094][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.914356][ T9125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.925262][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.996614][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.033704][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.043529][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.054669][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.064950][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.074507][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.084779][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.094324][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.103699][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.111369][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:45:57 executing program 0: socket$inet6(0xa, 0x0, 0x0) [ 216.189260][ T9125] device veth0_vlan entered promiscuous mode [ 216.218339][ T9125] device veth1_vlan entered promiscuous mode [ 216.265713][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.275835][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.285730][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.295768][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.305115][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.315354][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.324686][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.333894][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.343608][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.364267][ T9125] device veth0_macvtap entered promiscuous mode [ 216.380983][ T9125] device veth1_macvtap entered promiscuous mode [ 216.416484][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 216.427116][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.440317][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.456360][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 216.468202][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.481333][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.495476][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.504811][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.513791][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.523092][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.532302][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.542092][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.551820][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.561574][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:45:58 executing program 0: socket$inet6(0xa, 0x0, 0x0) [ 217.355549][ T9417] xt_CT: No such helper "netbios-ns" 19:45:59 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x200240c9) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000440)=""/228) ftruncate(0xffffffffffffffff, 0x8200) 19:45:59 executing program 0: socket$inet6(0xa, 0x0, 0x0) 19:45:59 executing program 0: mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000440)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) keyctl$read(0x3, 0x0, 0x0, 0x0) [ 217.839987][ T9429] overlayfs: overlapping upperdir path 19:45:59 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000019905000000000000000000000000240001001400010008010400abd2b7e3af222b8fe00000000c0002000500010000000000240002000c00020005000100000000001400010008000100000000000800020000000000080007"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x40003e, 0x3) [ 217.940787][ T9430] overlayfs: overlapping upperdir path 19:45:59 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x200240c9) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000440)=""/228) ftruncate(0xffffffffffffffff, 0x8200) [ 218.078720][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.088406][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.099527][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 19:45:59 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x200240c9) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000440)=""/228) ftruncate(0xffffffffffffffff, 0x8200) [ 218.472873][ T9446] overlayfs: overlapping upperdir path 19:46:00 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 218.624388][ T9451] overlayfs: overlapping upperdir path [ 218.676256][ T9455] [ 218.678767][ T9455] ********************************************************** [ 218.686684][ T9455] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 218.694312][ T9455] ** ** [ 218.701813][ T9455] ** trace_printk() being used. Allocating extra memory. ** [ 218.709496][ T9455] ** ** [ 218.717094][ T9455] ** This means that this is a DEBUG kernel and it is ** [ 218.724752][ T9455] ** unsafe for production use. ** [ 218.733973][ T9455] ** ** [ 218.741568][ T9455] ** If you see this message and you are not debugging ** [ 218.749202][ T9455] ** the kernel, report this immediately to your vendor! ** [ 218.756845][ T9455] ** ** [ 218.764449][ T9455] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** 19:46:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@srh, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 218.771863][ T9455] ********************************************************** [ 218.876620][ T9457] ===================================================== [ 218.883607][ T9457] BUG: KMSAN: uninit-value in bpf_trace_printk+0x160/0x1380 [ 218.890891][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 218.899543][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.909582][ T9457] Call Trace: [ 218.912865][ T9457] dump_stack+0x1c9/0x220 [ 218.917203][ T9457] kmsan_report+0xf7/0x1e0 [ 218.921609][ T9457] __msan_warning+0x58/0xa0 [ 218.926113][ T9457] bpf_trace_printk+0x160/0x1380 [ 218.931037][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 218.936142][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 218.941340][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 218.947137][ T9457] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 218.953190][ T9457] ? ktime_get+0x2b8/0x400 [ 218.957597][ T9457] ? 0xffffffffc02fb36c [ 218.961739][ T9457] bpf_prog_0605f9f479290f07+0x36/0xc94 [ 218.967269][ T9457] ? 0xffffffffc02fb36c [ 218.971410][ T9457] bpf_test_run+0x60c/0xe50 [ 218.975908][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 218.981116][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 218.986911][ T9457] bpf_prog_test_run_skb+0xe69/0x27c0 [ 218.992291][ T9457] ? bpf_prog_test_run_tracing+0x770/0x770 [ 218.998097][ T9457] __do_sys_bpf+0xb923/0x155f0 [ 219.002856][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.007958][ T9457] ? kmsan_internal_set_origin+0x75/0xb0 [ 219.013587][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.018695][ T9457] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 219.024598][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.029784][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.034969][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 219.040762][ T9457] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 219.046817][ T9457] ? prepare_exit_to_usermode+0x1ca/0x520 [ 219.052544][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.057654][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.062764][ T9457] __se_sys_bpf+0x8e/0xa0 [ 219.067087][ T9457] __ia32_sys_bpf+0x4a/0x70 [ 219.071576][ T9457] ? __se_sys_bpf+0xa0/0xa0 [ 219.076080][ T9457] do_fast_syscall_32+0x3bf/0x6d0 [ 219.081101][ T9457] entry_SYSENTER_compat+0x68/0x77 [ 219.086194][ T9457] RIP: 0023:0xf7f49dd9 [ 219.090248][ T9457] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.109839][ T9457] RSP: 002b:00000000f5d230cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 219.118246][ T9457] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000040 [ 219.126204][ T9457] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.134158][ T9457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.142115][ T9457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 219.150069][ T9457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.158037][ T9457] [ 219.160346][ T9457] Local variable ----pvec@truncate_inode_pages_range created at: [ 219.168062][ T9457] truncate_inode_pages_range+0x93/0x24b0 [ 219.173767][ T9457] truncate_inode_pages_range+0x93/0x24b0 [ 219.179465][ T9457] ===================================================== [ 219.186376][ T9457] Disabling lock debugging due to kernel taint [ 219.192510][ T9457] Kernel panic - not syncing: panic_on_warn set ... [ 219.199095][ T9457] CPU: 1 PID: 9457 Comm: syz-executor.1 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 219.209048][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.219084][ T9457] Call Trace: [ 219.222370][ T9457] dump_stack+0x1c9/0x220 [ 219.226693][ T9457] panic+0x3d5/0xc3e [ 219.230602][ T9457] kmsan_report+0x1df/0x1e0 [ 219.235095][ T9457] __msan_warning+0x58/0xa0 [ 219.239597][ T9457] bpf_trace_printk+0x160/0x1380 [ 219.244783][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.249893][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.255079][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 219.260871][ T9457] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 219.266948][ T9457] ? ktime_get+0x2b8/0x400 [ 219.271351][ T9457] ? 0xffffffffc02fb36c [ 219.275503][ T9457] bpf_prog_0605f9f479290f07+0x36/0xc94 [ 219.281027][ T9457] ? 0xffffffffc02fb36c [ 219.285182][ T9457] bpf_test_run+0x60c/0xe50 [ 219.289676][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.294872][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 219.300668][ T9457] bpf_prog_test_run_skb+0xe69/0x27c0 [ 219.306086][ T9457] ? bpf_prog_test_run_tracing+0x770/0x770 [ 219.311882][ T9457] __do_sys_bpf+0xb923/0x155f0 [ 219.316639][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.321733][ T9457] ? kmsan_internal_set_origin+0x75/0xb0 [ 219.327350][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.332448][ T9457] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 219.338338][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.343522][ T9457] ? kmsan_get_metadata+0x11d/0x180 [ 219.348706][ T9457] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 219.354499][ T9457] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 219.360549][ T9457] ? prepare_exit_to_usermode+0x1ca/0x520 [ 219.366254][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.371359][ T9457] ? kmsan_get_metadata+0x4f/0x180 [ 219.376460][ T9457] __se_sys_bpf+0x8e/0xa0 [ 219.380782][ T9457] __ia32_sys_bpf+0x4a/0x70 [ 219.385282][ T9457] ? __se_sys_bpf+0xa0/0xa0 [ 219.389781][ T9457] do_fast_syscall_32+0x3bf/0x6d0 [ 219.394797][ T9457] entry_SYSENTER_compat+0x68/0x77 [ 219.399893][ T9457] RIP: 0023:0xf7f49dd9 [ 219.403948][ T9457] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.423538][ T9457] RSP: 002b:00000000f5d230cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 219.432800][ T9457] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000040 [ 219.440755][ T9457] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.448707][ T9457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.456663][ T9457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 219.464629][ T9457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.473861][ T9457] Kernel Offset: 0x0 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 219.484965][ T9457] Rebooting in 86400 seconds..