[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2020/05/02 04:00:01 fuzzer started 2020/05/02 04:00:01 dialing manager at 10.128.0.26:41819 2020/05/02 04:00:01 syscalls: 3004 2020/05/02 04:00:01 code coverage: enabled 2020/05/02 04:00:01 comparison tracing: enabled 2020/05/02 04:00:01 extra coverage: enabled 2020/05/02 04:00:01 setuid sandbox: enabled 2020/05/02 04:00:01 namespace sandbox: enabled 2020/05/02 04:00:01 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/02 04:00:01 fault injection: enabled 2020/05/02 04:00:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/02 04:00:01 net packet injection: enabled 2020/05/02 04:00:01 net device setup: enabled 2020/05/02 04:00:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/02 04:00:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/02 04:00:01 USB emulation: /dev/raw-gadget does not exist 04:02:03 executing program 0: syzkaller login: [ 185.404477][ T7109] IPVS: ftp: loaded support on port[0] = 21 04:02:03 executing program 1: [ 185.550639][ T7109] chnl_net:caif_netlink_parms(): no params data found [ 185.665044][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.682736][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.691058][ T7109] device bridge_slave_0 entered promiscuous mode [ 185.715534][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.732948][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.741223][ T7109] device bridge_slave_1 entered promiscuous mode [ 185.769520][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.784124][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.827497][ T7109] team0: Port device team_slave_0 added [ 185.845299][ T7109] team0: Port device team_slave_1 added [ 185.855548][ T7247] IPVS: ftp: loaded support on port[0] = 21 04:02:04 executing program 2: [ 185.900697][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.909038][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.938084][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.969499][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.978236][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.008343][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.108290][ T7109] device hsr_slave_0 entered promiscuous mode 04:02:04 executing program 3: [ 186.172769][ T7109] device hsr_slave_1 entered promiscuous mode [ 186.290620][ T7299] IPVS: ftp: loaded support on port[0] = 21 [ 186.371488][ T7322] IPVS: ftp: loaded support on port[0] = 21 [ 186.517507][ T7247] chnl_net:caif_netlink_parms(): no params data found 04:02:04 executing program 4: [ 186.700035][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.711725][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.734905][ T7247] device bridge_slave_0 entered promiscuous mode [ 186.794069][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.801177][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.833268][ T7247] device bridge_slave_1 entered promiscuous mode [ 186.940223][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.026889][ T7495] IPVS: ftp: loaded support on port[0] = 21 [ 187.031856][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.087464][ T7109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.125387][ T7299] chnl_net:caif_netlink_parms(): no params data found 04:02:05 executing program 5: [ 187.143780][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 187.160292][ T7109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.238014][ T7247] team0: Port device team_slave_0 added [ 187.256353][ T7109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.339908][ T7109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.413289][ T7247] team0: Port device team_slave_1 added [ 187.458240][ T7681] IPVS: ftp: loaded support on port[0] = 21 [ 187.523347][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.530324][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.561892][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.607251][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.616897][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.647433][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.677927][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.687519][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.696205][ T7322] device bridge_slave_0 entered promiscuous mode [ 187.707447][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.715601][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.725465][ T7322] device bridge_slave_1 entered promiscuous mode [ 187.769095][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.777252][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.786343][ T7299] device bridge_slave_0 entered promiscuous mode [ 187.803277][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.810338][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.818928][ T7299] device bridge_slave_1 entered promiscuous mode [ 187.905979][ T7247] device hsr_slave_0 entered promiscuous mode [ 187.983179][ T7247] device hsr_slave_1 entered promiscuous mode [ 188.032118][ T7247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.039833][ T7247] Cannot create hsr debugfs directory [ 188.050835][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.078763][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.099558][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.110380][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.190823][ T7322] team0: Port device team_slave_0 added [ 188.200122][ T7322] team0: Port device team_slave_1 added [ 188.235418][ T7299] team0: Port device team_slave_0 added [ 188.247141][ T7299] team0: Port device team_slave_1 added [ 188.270268][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.277283][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.304410][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.397487][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.407743][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.438930][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.458177][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.465493][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.493035][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.508280][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.515762][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.542967][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.625343][ T7299] device hsr_slave_0 entered promiscuous mode [ 188.682782][ T7299] device hsr_slave_1 entered promiscuous mode [ 188.732107][ T7299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.739722][ T7299] Cannot create hsr debugfs directory [ 188.769668][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 188.819064][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 188.925086][ T7322] device hsr_slave_0 entered promiscuous mode [ 189.002800][ T7322] device hsr_slave_1 entered promiscuous mode [ 189.042042][ T7322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.049618][ T7322] Cannot create hsr debugfs directory [ 189.127721][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.270231][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.278146][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.287175][ T7681] device bridge_slave_0 entered promiscuous mode [ 189.299608][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.307031][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.315818][ T7681] device bridge_slave_1 entered promiscuous mode [ 189.343984][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.351055][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.359973][ T7495] device bridge_slave_0 entered promiscuous mode [ 189.371097][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.378585][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.387699][ T7495] device bridge_slave_1 entered promiscuous mode [ 189.406317][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.415015][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.428142][ T7109] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.459748][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.471223][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.495218][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.504151][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.527062][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.534414][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.544003][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.554621][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.563617][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.570654][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.580291][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.595639][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.615510][ T7247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.665081][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.673155][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.683872][ T7247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.739340][ T7247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.827203][ T7299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.891399][ T7247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.935330][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.955576][ T7299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.019401][ T7681] team0: Port device team_slave_0 added [ 190.028281][ T7495] team0: Port device team_slave_0 added [ 190.037166][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.046373][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.056138][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.071780][ T7299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.129658][ T7681] team0: Port device team_slave_1 added [ 190.146412][ T7495] team0: Port device team_slave_1 added [ 190.154896][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.166999][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.185026][ T7299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.268336][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.275998][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.303143][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.332133][ T7322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.356140][ T7322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.397946][ T7322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.465239][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.472240][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.498517][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.528449][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.537084][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.547226][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.556032][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.567334][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.574411][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.601099][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.624948][ T7322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.705438][ T7681] device hsr_slave_0 entered promiscuous mode [ 190.772396][ T7681] device hsr_slave_1 entered promiscuous mode [ 190.822004][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.829581][ T7681] Cannot create hsr debugfs directory [ 190.844262][ T7109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.854562][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.861514][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.887708][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.989324][ T7495] device hsr_slave_0 entered promiscuous mode [ 191.052422][ T7495] device hsr_slave_1 entered promiscuous mode [ 191.092122][ T7495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.099684][ T7495] Cannot create hsr debugfs directory [ 191.253532][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.260973][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.346488][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.445089][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.458262][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.477726][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.494096][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.509590][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.550682][ T7109] device veth0_vlan entered promiscuous mode [ 191.582899][ T7681] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.607616][ T7681] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.663692][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.676341][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.684668][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.693124][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.711679][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.730919][ T7681] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.774781][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.783162][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.790811][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.799587][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.807639][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.815957][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.827555][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.845951][ T7109] device veth1_vlan entered promiscuous mode [ 191.863614][ T7495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.907657][ T7681] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.975653][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.983175][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.991222][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.002859][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.011284][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.018397][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.031448][ T7495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.084258][ T7495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.127339][ T7495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.190290][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.203025][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.211553][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.220620][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.227748][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.237997][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.247147][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.255981][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.263104][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.271436][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.280750][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.289286][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.296461][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.331686][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.339958][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.354906][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.366224][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.376898][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.387818][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.394923][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.428844][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.437707][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.447667][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.456852][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.465799][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.474971][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.484004][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.494375][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.543227][ T7109] device veth0_macvtap entered promiscuous mode [ 192.560436][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.569463][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.581320][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.590686][ T2716] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.597795][ T2716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.606115][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.615439][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.624916][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.635906][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.645376][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.654683][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.663543][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.671675][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.680635][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.689363][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.698444][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.707183][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.715842][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.732295][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.740161][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.753889][ T7299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.793099][ T7109] device veth1_macvtap entered promiscuous mode [ 192.800805][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.809877][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.819132][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.829164][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.838244][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.847133][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.856421][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.865790][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.880460][ T7247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.909272][ T7322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.919787][ T7322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.946797][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.962163][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.970561][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.979298][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.988406][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.997622][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.005533][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.041022][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.062559][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.081201][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.089467][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.101420][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.110733][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.123403][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.136794][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.163357][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.175632][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.199361][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.208573][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.220389][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.235372][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.285968][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.329189][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.401653][ T7299] device veth0_vlan entered promiscuous mode [ 193.412949][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.421638][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.432897][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.441068][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.450004][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.458469][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.467588][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.475950][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.550122][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 04:02:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004380)="91", 0x1}], 0x1}}], 0x1, 0x0) [ 193.596135][ T7299] device veth1_vlan entered promiscuous mode [ 193.619714][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.632652][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.656627][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.683761][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.691562][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 04:02:12 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000005005000068030000680300006803000000050000680300008004000080040000800400008004000080040000030000000000000000000000000000000000000000000000000000000000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000003680300000000000000000000000000000000000000000000000030026270660000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000007300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00018010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000300000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414000000000000000000000000007866726d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 193.774458][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.783737][ T7247] device veth0_vlan entered promiscuous mode [ 193.855406][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.873010][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.881666][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.912568][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.919690][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.943310][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.952339][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.960869][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.968000][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.002303][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.045808][ T7247] device veth1_vlan entered promiscuous mode [ 194.069385][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.088315][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.097050][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.107362][ T8378] xt_CT: No such helper "netbios-ns" [ 194.113428][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.127904][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:02:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}], 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0xa0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0xe8) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) [ 194.189391][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.206102][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.219971][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.239977][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.257066][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.270561][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.290664][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 04:02:12 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 194.343630][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.355155][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.384639][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.401563][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.413349][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:02:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syncfs(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) [ 194.442095][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.453969][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.468391][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.478962][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.488242][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.495374][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.520239][ T7247] device veth0_macvtap entered promiscuous mode [ 194.538820][ T7299] device veth0_macvtap entered promiscuous mode [ 194.551363][ T7299] device veth1_macvtap entered promiscuous mode [ 194.560882][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.585249][ C0] hrtimer: interrupt took 47221 ns [ 194.619113][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.646889][ T27] audit: type=1804 audit(1588392132.868:2): pid=8390 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir455503673/syzkaller.dj8iNp/5/bus" dev="sda1" ino=15735 res=1 [ 194.652544][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.699373][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.712659][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.721193][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.731001][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.740295][ T7322] device veth0_vlan entered promiscuous mode [ 194.754496][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.769121][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.778960][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.792273][ T27] audit: type=1804 audit(1588392133.008:3): pid=8390 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir455503673/syzkaller.dj8iNp/5/bus" dev="sda1" ino=15735 res=1 [ 194.833633][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.859085][ T7322] device veth1_vlan entered promiscuous mode [ 194.869838][ T7247] device veth1_macvtap entered promiscuous mode [ 194.886998][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.895868][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.910194][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.930602][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.940111][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.948160][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.964357][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.989668][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.011432][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.030960][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.131406][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.139831][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.159264][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.170066][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.187669][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.200570][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.218746][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.230763][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.254713][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.278081][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:02:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd96}]}, 0x2c}, 0x1, 0x6c}, 0x0) [ 195.298641][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 04:02:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001080000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465"], 0x148}}, 0x0) [ 195.353143][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.361246][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.377857][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.397409][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.419011][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.442647][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.458412][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.479040][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.489269][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 195.506806][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.536680][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.562440][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.604606][ T7322] device veth0_macvtap entered promiscuous mode [ 195.615945][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.632706][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.640253][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.679644][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.689943][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.707269][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.719488][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.731631][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.747223][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.769359][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.785303][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.808687][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.819007][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 195.829561][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.841046][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.853831][ T7322] device veth1_macvtap entered promiscuous mode [ 195.866196][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.926797][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.935028][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.952542][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.066736][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.082178][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.093656][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.106886][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.116818][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 196.128280][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.140385][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.227363][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.247359][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.257235][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.265400][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.275671][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.286501][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.296444][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.307370][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.321993][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 196.341732][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.376400][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.434898][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.452850][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.463370][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:02:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) 04:02:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001080000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465"], 0x148}}, 0x0) [ 196.554279][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.605930][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.648031][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.780220][ T7495] device veth0_vlan entered promiscuous mode [ 196.817670][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.829512][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.850180][ T7495] device veth1_vlan entered promiscuous mode [ 196.862092][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.869978][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.879616][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.913187][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.922752][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 04:02:15 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) [ 196.931629][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.989209][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.001051][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.020819][ T7495] device veth0_macvtap entered promiscuous mode [ 197.061158][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.077803][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.106576][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.120990][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.130985][ T7681] device veth0_vlan entered promiscuous mode [ 197.146163][ T7495] device veth1_macvtap entered promiscuous mode [ 197.178071][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.188930][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.230132][ T7681] device veth1_vlan entered promiscuous mode [ 197.255415][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.329649][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.347953][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.359129][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.377950][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.401885][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.419359][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.430399][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.441851][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.453729][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.470986][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.480664][ T2954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.499537][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.510667][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.521602][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.532421][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.543988][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.555425][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.565436][ T7495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 197.577666][ T7495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.589566][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.599608][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.609599][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.618849][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.628715][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.648028][ T7681] device veth0_macvtap entered promiscuous mode [ 197.670151][ T7681] device veth1_macvtap entered promiscuous mode [ 197.828329][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.845622][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.859130][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 04:02:16 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) socket(0x840000000002, 0x80000, 0xb9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) [ 197.882140][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.901730][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.921687][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.950595][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 197.972634][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.992618][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.020642][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.046749][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.063686][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.080232][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.088750][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.099823][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.114630][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.131428][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.142846][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.154190][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.165903][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.176852][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.188333][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.199666][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.210128][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.221329][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.233701][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.251844][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.260668][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 04:02:16 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:02:16 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007fd600fe01b2a4a280930a06030000a843089100fe80040008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(0x0) 04:02:16 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000018c0)=""/246) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x804, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) write$dsp(r2, &(0x7f0000000040)="36daaaa51121b9e19acda3f4f927d465ba89c9f271863d975f1e539e7c4e99adbc8365f35a6d6dd79e73e63049ef6581c81628dfbf31996f21f515762f76ea2ecdb82c3c2edea3d5e501065c09aba9848e733a07584bf945a5d52357e1ef25813879225a1b5a505fed1f363cf5e22a36691d2e8aedd83153d8307d363c65783629b65ae0a8af742e375d2d99f4a2878f274c0f56d9", 0x95) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) 04:02:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) 04:02:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000001300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x1000000) 04:02:16 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) socket(0x840000000002, 0x80000, 0xb9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) 04:02:16 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) r2 = getpid() getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(r2, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 198.628811][ T8460] debugfs: File 'dropped' in directory 'sg0' already present! [ 198.652928][ T8460] debugfs: File 'msg' in directory 'sg0' already present! [ 198.670262][ T8460] debugfs: File 'trace0' in directory 'sg0' already present! [ 198.774129][ T27] audit: type=1800 audit(1588392136.998:4): pid=8471 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15758 res=0 04:02:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) 04:02:17 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) [ 198.826032][ T8476] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 198.853672][ T8476] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:02:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000001300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x1000000) [ 198.907244][ T8476] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 198.918772][ T8476] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:02:17 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002e00a1b44f5ad47329e2000700000000", @ANYRES32, @ANYBLOB="d7d5d21500000000000300dd"], 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 198.980395][ T8476] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 04:02:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) 04:02:17 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) socket(0x840000000002, 0x80000, 0xb9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) [ 199.366400][ T8509] debugfs: File 'dropped' in directory 'sg0' already present! 04:02:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) [ 199.452725][ T8509] debugfs: File 'msg' in directory 'sg0' already present! [ 199.465000][ T8509] debugfs: File 'trace0' in directory 'sg0' already present! [ 199.500431][ T27] audit: type=1800 audit(1588392137.718:5): pid=8512 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15758 res=0 04:02:17 executing program 0: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000018c0)=""/246) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x804, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) write$dsp(r2, &(0x7f0000000040)="36daaaa51121b9e19acda3f4f927d465ba89c9f271863d975f1e539e7c4e99adbc8365f35a6d6dd79e73e63049ef6581c81628dfbf31996f21f515762f76ea2ecdb82c3c2edea3d5e501065c09aba9848e733a07584bf945a5d52357e1ef25813879225a1b5a505fed1f363cf5e22a36691d2e8aedd83153d8307d363c65783629b65ae0a8af742e375d2d99f4a2878f274c0f56d9", 0x95) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) 04:02:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x3}}) 04:02:17 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) socket(0x840000000002, 0x80000, 0xb9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5a}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) 04:02:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) 04:02:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001080000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/193, @ANYBLOB], 0x148}}, 0x0) 04:02:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) [ 199.764173][ T8526] debugfs: File 'dropped' in directory 'sg0' already present! [ 199.791610][ T8526] debugfs: File 'msg' in directory 'sg0' already present! 04:02:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) [ 199.826984][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 04:02:18 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06030000a843089100fe80040008000800020000dc13382d2819009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) [ 199.869271][ T8526] debugfs: File 'trace0' in directory 'sg0' already present! 04:02:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) [ 199.968522][ T27] audit: type=1800 audit(1588392138.188:6): pid=8542 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15761 res=0 [ 200.039471][ T8548] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.5'. 04:02:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001080000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/193, @ANYBLOB], 0x148}}, 0x0) 04:02:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0xfffffffffffffffa}) 04:02:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) [ 200.215520][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.319806][ T8555] ------------[ cut here ]------------ [ 200.325511][ T8555] WARNING: CPU: 1 PID: 8555 at fs/iomap/apply.c:51 iomap_apply+0xa0c/0xcb0 [ 200.334215][ T8555] Kernel panic - not syncing: panic_on_warn set ... [ 200.340822][ T8555] CPU: 1 PID: 8555 Comm: syz-executor.4 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 200.350636][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.360832][ T8555] Call Trace: [ 200.364144][ T8555] dump_stack+0x188/0x20d [ 200.368592][ T8555] ? iomap_apply+0x960/0xcb0 [ 200.373198][ T8555] panic+0x2e3/0x75c [ 200.377298][ T8555] ? add_taint.cold+0x16/0x16 [ 200.381989][ T8555] ? printk+0xba/0xed [ 200.385991][ T8555] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 200.391473][ T8555] ? __warn.cold+0x14/0x35 [ 200.395909][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.400514][ T8555] __warn.cold+0x2f/0x35 [ 200.404891][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.409492][ T8555] report_bug+0x27b/0x2f0 [ 200.413836][ T8555] do_error_trap+0x12b/0x220 [ 200.418654][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.423353][ T8555] do_invalid_op+0x32/0x40 [ 200.427785][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.432564][ T8555] invalid_op+0x23/0x30 [ 200.436738][ T8555] RIP: 0010:iomap_apply+0xa0c/0xcb0 [ 200.441956][ T8555] Code: ff e9 0e fd ff ff e8 03 71 95 ff 0f 0b e9 07 f7 ff ff e8 f7 70 95 ff 0f 0b 49 c7 c4 fb ff ff ff e9 35 f9 ff ff e8 e4 70 95 ff <0f> 0b 49 c7 c4 fb ff ff ff e9 22 f9 ff ff e8 d1 70 95 ff 0f 0b e9 [ 200.461899][ T8555] RSP: 0018:ffffc900063e7968 EFLAGS: 00010216 [ 200.467982][ T8555] RAX: 0000000000040000 RBX: ffffc900063e79c8 RCX: ffffc9001143f000 [ 200.476080][ T8555] RDX: 0000000000006425 RSI: ffffffff81ddc3ac RDI: 0000000000000007 [ 200.484065][ T8555] RBP: 0000000000000000 R08: ffff888053402540 R09: ffffed1015ce710c [ 200.492188][ T8555] R10: ffff8880ae73885b R11: ffffed1015ce710b R12: 0000000000000000 [ 200.500175][ T8555] R13: ffff88805219f5f8 R14: 0000000000000000 R15: ffffc900063e7b50 [ 200.508404][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.513024][ T8555] ? iomap_apply+0xa0c/0xcb0 [ 200.517630][ T8555] ? iomap_fiemap+0x2c0/0x2c0 [ 200.522442][ T8555] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 200.528970][ T8555] ? mark_lock+0x12b/0xf10 [ 200.533417][ T8555] ? __lock_acquire+0x2184/0x4c50 [ 200.538463][ T8555] iomap_fiemap+0x184/0x2c0 [ 200.543193][ T8555] ? iomap_fiemap+0x2c0/0x2c0 [ 200.547887][ T8555] ? iomap_to_fiemap+0x210/0x210 [ 200.552853][ T8555] ? tomoyo_path_number_perm+0x1ee/0x4d0 [ 200.558542][ T8555] _ext4_fiemap+0x178/0x4f0 [ 200.563065][ T8555] ? ext4_ext_precache+0x5f0/0x5f0 [ 200.568192][ T8555] ? lock_downgrade+0x840/0x840 [ 200.573072][ T8555] ovl_fiemap+0x13f/0x200 [ 200.577425][ T8555] do_vfs_ioctl+0x8d7/0x12d0 [ 200.582042][ T8555] ? ioctl_file_clone+0x180/0x180 [ 200.587193][ T8555] ? do_dup2+0x520/0x520 [ 200.591464][ T8555] ksys_ioctl+0xa3/0x180 [ 200.595728][ T8555] __x64_sys_ioctl+0x6f/0xb0 [ 200.600336][ T8555] ? lockdep_hardirqs_on+0x463/0x620 [ 200.605640][ T8555] do_syscall_64+0xf6/0x7d0 [ 200.610164][ T8555] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 200.616065][ T8555] RIP: 0033:0x45c829 [ 200.619968][ T8555] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.639592][ T8555] RSP: 002b:00007f7409af4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.648025][ T8555] RAX: ffffffffffffffda RBX: 00000000004e5040 RCX: 000000000045c829 [ 200.656018][ T8555] RDX: 00000000200001c0 RSI: 00000000c020660b RDI: 0000000000000005 [ 200.664008][ T8555] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 200.672004][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 200.680107][ T8555] R13: 0000000000000314 R14: 00000000004c579e R15: 00007f7409af56d4 [ 200.689138][ T8555] Kernel Offset: disabled [ 200.693811][ T8555] Rebooting in 86400 seconds..