[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2020/10/02 18:21:33 fuzzer started 2020/10/02 18:21:33 dialing manager at 10.128.0.105:45917 2020/10/02 18:21:33 syscalls: 3430 2020/10/02 18:21:33 code coverage: enabled 2020/10/02 18:21:33 comparison tracing: enabled 2020/10/02 18:21:33 extra coverage: enabled 2020/10/02 18:21:33 setuid sandbox: enabled 2020/10/02 18:21:33 namespace sandbox: enabled 2020/10/02 18:21:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/02 18:21:33 fault injection: enabled 2020/10/02 18:21:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/02 18:21:33 net packet injection: enabled 2020/10/02 18:21:33 net device setup: enabled 2020/10/02 18:21:33 concurrency sanitizer: enabled 2020/10/02 18:21:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/02 18:21:33 USB emulation: enabled 2020/10/02 18:21:33 hci packet injection: enabled 2020/10/02 18:21:33 wifi device emulation: enabled 2020/10/02 18:21:38 suppressing KCSAN reports in functions: 'wbt_issue' 'netlink_insert' 'alloc_pid' '__io_cqring_fill_event' 'snd_rawmidi_transmit' '__writeback_single_inode' '__mark_inode_dirty' '__xa_clear_mark' 'do_select' 'generic_write_end' 'do_nanosleep' 'ext4_mark_iloc_dirty' 'expire_timers' '__delete_from_page_cache' 'tick_nohz_stop_tick' '__add_to_page_cache_locked' 'blk_mq_rq_ctx_init' '__delayacct_blkio_end' 'ext4_free_inodes_count' 'blk_mq_request_bypass_insert' 'n_tty_receive_buf_common' 'do_readlinkat' 'blk_mq_sched_dispatch_requests' 'blk_mq_dispatch_rq_list' 'find_get_pages_range_tag' 'dd_has_work' '__ext4_new_inode' 'ext4_free_inode' 'do_sys_poll' '__filemap_fdatawrite_range' 'wbt_done' 'xas_find_marked' 'kauditd_thread' 'wg_packet_decrypt_worker' 'ext4_writepages' 'pcpu_alloc' 'xas_clear_mark' 'shmem_mknod' 'futex_wait_queue_me' 'exit_mm' 'ext4_setattr' 'lbmIODone' 'do_syslog' 'ext4_mb_regular_allocator' 'snd_rawmidi_kernel_write1' 'shmem_unlink' '__mod_timer' 'audit_log_start' 'generic_file_buffered_read' 'do_signal_stop' 'ext4_mb_good_group' 'snd_rawmidi_poll' 18:24:26 executing program 0: pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 18:24:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x10, &(0x7f00000000c0)) 18:24:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x80, &(0x7f0000000140)) 18:24:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:24:26 executing program 4: semget(0x0, 0x1, 0x28) 18:24:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syzkaller login: [ 205.537068][ T8745] IPVS: ftp: loaded support on port[0] = 21 [ 205.636508][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 205.668980][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.676348][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.684125][ T8745] device bridge_slave_0 entered promiscuous mode [ 205.691313][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.698713][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.706383][ T8745] device bridge_slave_1 entered promiscuous mode [ 205.720824][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.731386][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.748587][ T8745] team0: Port device team_slave_0 added [ 205.764274][ T8745] team0: Port device team_slave_1 added [ 205.785192][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.786926][ T8747] IPVS: ftp: loaded support on port[0] = 21 [ 205.792151][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.833990][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.854833][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.861783][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.888474][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.919695][ T8749] IPVS: ftp: loaded support on port[0] = 21 [ 205.931827][ T8745] device hsr_slave_0 entered promiscuous mode [ 205.938919][ T8745] device hsr_slave_1 entered promiscuous mode [ 206.053157][ T8747] chnl_net:caif_netlink_parms(): no params data found [ 206.067189][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 206.122072][ T8745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.131112][ T8745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.154195][ T8751] IPVS: ftp: loaded support on port[0] = 21 [ 206.187675][ T8745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.234361][ T8753] IPVS: ftp: loaded support on port[0] = 21 [ 206.247236][ T8745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.255400][ T8747] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.263792][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.271130][ T8747] device bridge_slave_0 entered promiscuous mode [ 206.297886][ T8747] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.305018][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.312392][ T8747] device bridge_slave_1 entered promiscuous mode [ 206.327323][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.335917][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.361507][ T8749] device bridge_slave_0 entered promiscuous mode [ 206.369492][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.377485][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.390543][ T8749] device bridge_slave_1 entered promiscuous mode [ 206.408300][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.423547][ T8747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.443027][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.453042][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.460071][ T8745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.467335][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.474414][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.484591][ T8747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.499653][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 206.518376][ T8749] team0: Port device team_slave_0 added [ 206.533845][ T8749] team0: Port device team_slave_1 added [ 206.547334][ T8747] team0: Port device team_slave_0 added [ 206.568712][ T8747] team0: Port device team_slave_1 added [ 206.582878][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 206.618636][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.626521][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.653101][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.677367][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.687178][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.715592][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.726564][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.734865][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.753806][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.760766][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.787524][ T8747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.801762][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 206.824215][ T8747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.831185][ T8747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.857762][ T8747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.886059][ T8749] device hsr_slave_0 entered promiscuous mode [ 206.894321][ T8749] device hsr_slave_1 entered promiscuous mode [ 206.900565][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.908561][ T8749] Cannot create hsr debugfs directory [ 206.932419][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 206.954178][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.961050][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.968304][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.976149][ T8751] device bridge_slave_0 entered promiscuous mode [ 207.004710][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.011801][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.020993][ T8751] device bridge_slave_1 entered promiscuous mode [ 207.042275][ T8747] device hsr_slave_0 entered promiscuous mode [ 207.049084][ T8747] device hsr_slave_1 entered promiscuous mode [ 207.056015][ T8747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.063823][ T8747] Cannot create hsr debugfs directory [ 207.078647][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.092345][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.100043][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.108167][ T8753] device bridge_slave_0 entered promiscuous mode [ 207.117372][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.124688][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.132231][ T8753] device bridge_slave_1 entered promiscuous mode [ 207.145013][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.160312][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.186742][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.200329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.208284][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.217778][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.226297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.234719][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.241730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.266207][ T8751] team0: Port device team_slave_0 added [ 207.275008][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.284943][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.294216][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.302499][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.309560][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.325565][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.332630][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.341551][ T8755] device bridge_slave_0 entered promiscuous mode [ 207.349574][ T8751] team0: Port device team_slave_1 added [ 207.363085][ T8753] team0: Port device team_slave_0 added [ 207.369885][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.385915][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.394574][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.402125][ T8755] device bridge_slave_1 entered promiscuous mode [ 207.416295][ T8753] team0: Port device team_slave_1 added [ 207.432291][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.439449][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.465454][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.483253][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.497358][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.506954][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.514014][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.539927][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.556465][ T8749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.569883][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.585413][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.592359][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.592817][ T3978] Bluetooth: hci0: command 0x0409 tx timeout [ 207.622188][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.641308][ T8749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.656104][ T8747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.671317][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.680043][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.688873][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.700024][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.707378][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.733802][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.744988][ T8749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.758401][ T8747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.769699][ T8751] device hsr_slave_0 entered promiscuous mode [ 207.776348][ T8751] device hsr_slave_1 entered promiscuous mode [ 207.782652][ T8751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.790237][ T8751] Cannot create hsr debugfs directory [ 207.796232][ T8749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.809179][ T8755] team0: Port device team_slave_0 added [ 207.816025][ T8747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.825487][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.835615][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.851066][ T8745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.861714][ T3959] Bluetooth: hci1: command 0x0409 tx timeout [ 207.867885][ T8745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.880999][ T8755] team0: Port device team_slave_1 added [ 207.888017][ T8747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.903392][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.911506][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.921895][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.930408][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.938821][ T3959] Bluetooth: hci2: command 0x0409 tx timeout [ 207.945837][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.973483][ T8753] device hsr_slave_0 entered promiscuous mode [ 207.979889][ T8753] device hsr_slave_1 entered promiscuous mode [ 207.986621][ T8753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.994919][ T8753] Cannot create hsr debugfs directory [ 208.027605][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.034603][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.060889][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.072419][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.080656][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.091146][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.104840][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.111787][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.138619][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.152843][ T3978] Bluetooth: hci3: command 0x0409 tx timeout [ 208.212513][ T8751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.224110][ T8751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.233013][ T5081] Bluetooth: hci4: command 0x0409 tx timeout [ 208.247440][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.256299][ T8755] device hsr_slave_0 entered promiscuous mode [ 208.263512][ T8755] device hsr_slave_1 entered promiscuous mode [ 208.269857][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.277860][ T8755] Cannot create hsr debugfs directory [ 208.285989][ T8753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.305662][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.314547][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.323682][ T8751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.339932][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.351292][ T8753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.361579][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.369845][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.379013][ T8751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.392920][ T5081] Bluetooth: hci5: command 0x0409 tx timeout [ 208.407636][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.416318][ T8753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.427199][ T8753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.438256][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.446694][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.456240][ T3959] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.463300][ T3959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.470959][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.484159][ T8745] device veth0_vlan entered promiscuous mode [ 208.499468][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.520032][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.528452][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.537433][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.545119][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.553021][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.560603][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.578608][ T8745] device veth1_vlan entered promiscuous mode [ 208.593708][ T8755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.606704][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.614630][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.622448][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.631614][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.640198][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.647249][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.655123][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.663557][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.671685][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.678853][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.686541][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.695086][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.703401][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.710445][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.718304][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.733773][ T8755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.764647][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.775830][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.784422][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.792666][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.801514][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.811556][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.820383][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.828843][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.837573][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.846018][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.856644][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.864936][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.872605][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.881421][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.898918][ T8745] device veth0_macvtap entered promiscuous mode [ 208.911381][ T8747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.923289][ T8747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.935885][ T8755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.947439][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.956250][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.964719][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.972883][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.981078][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.989544][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.997947][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.006035][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.017467][ T8745] device veth1_macvtap entered promiscuous mode [ 209.031725][ T8755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.051887][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.060154][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.068730][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.077200][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.085576][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.094333][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.113752][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.126362][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.139897][ T8749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.153977][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.168114][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.176800][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.185430][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.194388][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.203474][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.210989][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.222932][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.230325][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.239717][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.252868][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.260266][ T3978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.269692][ T8745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.279553][ T8745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.288612][ T8745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.297523][ T8745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.309229][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.321609][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.334928][ T8753] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.346836][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.359764][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.368092][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.401150][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.409661][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.418348][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.425455][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.434293][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.442699][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.451206][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.458272][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.465924][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.474797][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.483400][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.491758][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.500239][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.508532][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.515582][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.523589][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.532039][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.540284][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.547359][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.555201][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.563739][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.572282][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.580281][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.594210][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.612830][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.621464][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.630012][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.641367][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.649831][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.659518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.668674][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.673016][ T3978] Bluetooth: hci0: command 0x041b tx timeout [ 209.691477][ T8749] device veth0_vlan entered promiscuous mode [ 209.712027][ T8747] device veth0_vlan entered promiscuous mode [ 209.725772][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.737148][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.745857][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.756964][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.766434][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.775283][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.790891][ T8749] device veth1_vlan entered promiscuous mode [ 209.799745][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.805375][ T8751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.815598][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.829167][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.840335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.848844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.857707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.866190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.874274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.882032][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.890466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.899610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.908273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.917675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.926478][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 209.938832][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.954544][ T8747] device veth1_vlan entered promiscuous mode [ 209.963126][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.973895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.982254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.991100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.992980][ T35] Bluetooth: hci2: command 0x041b tx timeout [ 210.000609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.015615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.024494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.040735][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.052931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.061230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.069961][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.073353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.088001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.102533][ T8749] device veth0_macvtap entered promiscuous mode [ 210.112468][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.125805][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.137314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.146275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.156426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.166187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.174154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.182500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.193830][ T8749] device veth1_macvtap entered promiscuous mode [ 210.202502][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.235375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.246373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.258696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.272378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state 18:24:32 executing program 0: [ 210.279991][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.305596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.315984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.327049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state 18:24:32 executing program 0: [ 210.334197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.342493][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.351608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.371576][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.382938][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 210.388201][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.401214][ T5081] Bluetooth: hci4: command 0x041b tx timeout [ 210.404992][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.419379][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.430762][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.442120][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.458395][ T8755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.472589][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 18:24:32 executing program 0: [ 210.474445][ T35] Bluetooth: hci5: command 0x041b tx timeout [ 210.504180][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.512493][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 18:24:32 executing program 0: 18:24:32 executing program 0: 18:24:32 executing program 0: [ 210.541177][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.563476][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.572567][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 18:24:32 executing program 0: [ 210.592579][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.613315][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.626948][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.653320][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.672968][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.681244][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.703262][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.711485][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.720905][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.728726][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.742321][ T8747] device veth0_macvtap entered promiscuous mode [ 210.753260][ T8749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.762299][ T8749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.774256][ T8749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.783570][ T8749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.799800][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.807368][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.815777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.823573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.832060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.844122][ T8747] device veth1_macvtap entered promiscuous mode [ 210.854805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.863092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.873425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.882173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.915020][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.926685][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.938826][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.950932][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.963370][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.974665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.984109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.993592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.003615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.014644][ T8751] device veth0_vlan entered promiscuous mode [ 211.023312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.031015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.040256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.048991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.059422][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.070745][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.081616][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.092996][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.104373][ T8747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.114841][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.126559][ T8751] device veth1_vlan entered promiscuous mode [ 211.135888][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.145878][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.177253][ T8747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.186403][ T8747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.198300][ T8747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.207774][ T8747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.230013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.239386][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.248437][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.253775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.299476][ T3193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.302887][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.310647][ T3193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.324078][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.332643][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.343067][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.352471][ T8753] device veth0_vlan entered promiscuous mode [ 211.365746][ T8751] device veth0_macvtap entered promiscuous mode [ 211.377475][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.385434][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.393956][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.403108][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.412692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.429942][ T8753] device veth1_vlan entered promiscuous mode [ 211.454906][ T8751] device veth1_macvtap entered promiscuous mode [ 211.483711][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.491985][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.508751][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.518334][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.552875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.561172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.572625][ T8755] device veth0_vlan entered promiscuous mode [ 211.589962][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.601924][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.613134][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.624524][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.634989][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.646302][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.657880][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.668667][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.680248][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.690522][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.702165][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.714014][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.725018][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.736608][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.744808][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.753225][T10055] Bluetooth: hci0: command 0x040f tx timeout [ 211.755013][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.768360][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.776849][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.787048][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.796731][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.806518][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.821004][ T8755] device veth1_vlan entered promiscuous mode [ 211.829325][ T3193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.849502][ T8751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.859640][ T3193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.867664][ T8751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.877749][ T8751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.886635][ T8751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.902471][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.912062][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.921373][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.940419][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.942974][ T8753] device veth0_macvtap entered promiscuous mode [ 211.952834][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.960796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.972123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.981153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.989202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.999814][T10055] Bluetooth: hci1: command 0x040f tx timeout [ 212.010859][ T8753] device veth1_macvtap entered promiscuous mode [ 212.022858][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.031337][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.044397][ T8755] device veth0_macvtap entered promiscuous mode [ 212.056669][ T8755] device veth1_macvtap entered promiscuous mode [ 212.072809][ T35] Bluetooth: hci2: command 0x040f tx timeout [ 212.086488][ T3193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.089863][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.106766][ T3193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.108037][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.125125][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.136597][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:24:33 executing program 1: 18:24:33 executing program 0: [ 212.147220][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.164334][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.175279][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.197354][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.228158][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.245325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.263438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.271385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.293618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.302616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.316120][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.333758][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.345558][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.357173][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.368264][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.380384][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.392437][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.419989][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.432647][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.444424][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.455955][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.466891][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.478586][T10055] Bluetooth: hci4: command 0x040f tx timeout [ 212.492878][T10055] Bluetooth: hci3: command 0x040f tx timeout [ 212.501275][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.514457][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.527335][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.540175][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.551210][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.552973][T10055] Bluetooth: hci5: command 0x040f tx timeout [ 212.562136][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.577746][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.588616][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.602871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.611605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.621688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.630300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.640529][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.641667][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.654948][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.660040][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.677059][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.687912][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.698135][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.711215][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.722084][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.733156][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.743178][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 212.753662][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.765463][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.775747][ T8753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.785416][ T8753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.795079][ T8753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.804299][ T8753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.814423][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.822368][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.831914][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.855385][ T8755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.865042][ T8755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.874772][ T8755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.883977][ T8755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 18:24:34 executing program 3: [ 213.005307][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.031473][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.034088][ T3193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.057928][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.084986][ T3193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.087478][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.105306][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.113289][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.132165][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.135905][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.143381][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:24:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x5e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) [ 213.173195][ T9773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.833361][ T3978] Bluetooth: hci0: command 0x0419 tx timeout 18:24:35 executing program 0: 18:24:35 executing program 2: 18:24:35 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:35 executing program 1: 18:24:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x200fff) 18:24:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r0, &(0x7f0000000180), 0x100000000000014f, 0x4000, 0x0) 18:24:35 executing program 4: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e5f701", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff]}, @mcast2={0xff, 0x2, [0x0, 0x50]}}}}}}}, 0x0) 18:24:35 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60, 0x0, 0x0, 0x0, 0x4}}], 0x210, 0x4c, 0x0) 18:24:35 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[], 0x2c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:24:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) [ 214.073569][ T3978] Bluetooth: hci1: command 0x0419 tx timeout [ 214.090376][T10233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:24:35 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x60, 0x0, 0x0, 0x0, 0x4}}], 0x210, 0x4c, 0x0) [ 214.153232][ T3978] Bluetooth: hci2: command 0x0419 tx timeout 18:24:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 18:24:36 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) 18:24:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 18:24:36 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) [ 214.249840][ T28] audit: type=1800 audit(1601663076.047:2): pid=10233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15755 res=0 errno=0 18:24:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x200fff) 18:24:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:24:36 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@private, @private}, 0xc) 18:24:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df02", 0x11}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:24:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @private2}]}, 0x2c}}, 0x0) [ 214.404999][ T28] audit: type=1804 audit(1601663076.207:3): pid=10271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/3/file0/bus" dev="ramfs" ino=33828 res=1 errno=0 18:24:36 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:36 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) [ 214.541725][T10290] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 214.545726][ T28] audit: type=1804 audit(1601663076.297:4): pid=10286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/3/file0/bus" dev="ramfs" ino=33828 res=1 errno=0 [ 214.552953][ T3978] Bluetooth: hci3: command 0x0419 tx timeout [ 214.601756][T10285] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.627614][ T3978] Bluetooth: hci4: command 0x0419 tx timeout 18:24:36 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 18:24:36 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000007400)=[{{&(0x7f0000000000)=@nfc={0x27, 0x3}, 0x80, 0x0}}], 0x1, 0x0) 18:24:36 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) tkill(r1, 0x34) [ 214.653420][ T3959] Bluetooth: hci5: command 0x0419 tx timeout [ 214.676377][T10297] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 18:24:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x56, [@typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x0, 0x0, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x5}]}}, &(0x7f0000001300)=""/4067, 0x3e, 0xfe3, 0x1}, 0x20) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x221) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xe, 0x0, "a6d142dc40d208830e493f7f2e2d7f49fac608b362938039f867c261e2e4843032ea2ff5d58bd6e2ea289f7ddc21761ed9663902603879e6c6e0386d5e6e23d244a1fab18abaa869e6d0ca91ea09bc75"}, 0xd8) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x1df8, 0x11, 0x0, 0x27) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 18:24:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 18:24:37 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 18:24:37 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) 18:24:37 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) tkill(r1, 0x34) [ 215.142073][ T28] audit: type=1804 audit(1601663076.937:5): pid=10286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/3/file0/file0/bus" dev="ramfs" ino=33874 res=1 errno=0 [ 215.255623][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 18:24:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f41f4cbace7f9a7df02", 0x11}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:24:37 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) tkill(r1, 0x34) 18:24:37 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) 18:24:37 executing program 3: move_pages(0x0, 0x0, 0x0, &(0x7f000026bfec), 0x0, 0x0) 18:24:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 18:24:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 18:24:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000100), 0x4) 18:24:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 18:24:37 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 18:24:37 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:37 executing program 3: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) syz_open_dev$loop(0x0, 0xa1e, 0x0) r1 = memfd_create(&(0x7f0000000140)='\x01^\x94t\xff\xba\xce\xd7\xd0B\x18G[\xd6\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 215.432223][T10337] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.454204][T10346] sock: process `syz-executor.0' is using obsolete setsockopt SO_BSDCOMPAT [ 215.518045][T10357] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:24:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x14, 0x1, 0x3, 0x201}, 0x14}}, 0x0) 18:24:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write(r0, &(0x7f0000000400)="82fcbe5d", 0x4) 18:24:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:24:37 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:24:38 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() fchdir(0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:38 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321200d34e813fb4b5c49ca7df29a31eb147d4b723f6894d2b0f007879d6c17cd602c191fa4302f7bc6402e4b2619d684b31bed442303bdf2d6948f733de6a8df73651b35d447528027a58ccfbb2436c32b749b527c6cbf8edf91cc6f7f3ac5adc1f4e273af4115ade8a3ad233a148994ffdca13b46b1fd8855895112ea3152"], 0x145) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:24:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 18:24:38 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060001703002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa004801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x0, 0x0, 0x0) 18:24:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 18:24:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5, 0x0, 0x1000003}, 0x14}}, 0x0) 18:24:38 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() fchdir(0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x63, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1, 0x0, 0x0, 0x7}, 0x0) 18:24:38 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 18:24:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfffffffffffffec2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x40009, 0x0) 18:24:38 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() fchdir(0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) 18:24:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:24:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 18:24:38 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 18:24:38 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(0x0, 0x34) 18:24:38 executing program 4: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 18:24:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001cc0)}, {&(0x7f0000000080)="132419b3d35b8af26552785e69b97c1d6aa4d97ec22836c5db", 0x19}, {&(0x7f0000001400)="0ebb", 0x2}], 0x3) sendto$inet(r0, &(0x7f0000000280)="74bfe1375125aaa5e8637314e2ccb796033fca49c7a71bb92a2d73aafc72f010882c9c69d89a58b396270d337831c0d9466db93228d12251e0a2c96cb9aaf22a2e5e6e7ce589e2f01e21", 0x4a, 0xc32589e37339f7e6, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 18:24:38 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(0x0, 0x34) 18:24:38 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) 18:24:38 executing program 0: socket(0xa, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x0, 0xfffffe00, 'lblcr\x00'}, 0x2c) 18:24:38 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') 18:24:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000021000101000000000000000002"], 0x28}}, 0x0) 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(0x0, 0x34) 18:24:39 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) 18:24:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) 18:24:39 executing program 4: 18:24:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0xb, 0x0, 0x0, 0x5]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r3}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 217.301004][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x470) 18:24:39 executing program 4: migrate_pages(0x0, 0xa28, 0x0, &(0x7f00000012c0)=0x1) 18:24:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4), 0x1c) 18:24:39 executing program 2: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0xb, 0xcc, [@local, @dev]}, @timestamp={0x7, 0x14, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 0: 18:24:39 executing program 4: 18:24:39 executing program 1: 18:24:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x5}]}, 0x28}}, 0x0) 18:24:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860ac5cf65ac618ded89748955eeaf4b4834ff922b3f1e0b02bd67aa030595eecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x7ff2, 0x20c49a, 0x0, 0x20c49a) 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=@ipv4_newrule={0x28, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}}, 0x0) 18:24:39 executing program 4: 18:24:39 executing program 1: 18:24:39 executing program 4: 18:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=@ipv4_newrule={0x28, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}}, 0x0) 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 2: 18:24:39 executing program 1: 18:24:39 executing program 0: 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 4: 18:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=@ipv4_newrule={0x28, 0x20, 0xf29, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}}, 0x0) 18:24:39 executing program 2: 18:24:39 executing program 1: 18:24:39 executing program 0: 18:24:39 executing program 4: 18:24:39 executing program 3: 18:24:39 executing program 2: 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:39 executing program 0: 18:24:39 executing program 1: 18:24:39 executing program 4: 18:24:39 executing program 3: 18:24:39 executing program 2: 18:24:39 executing program 1: 18:24:39 executing program 0: 18:24:39 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r0, 0x34) 18:24:39 executing program 4: 18:24:39 executing program 3: 18:24:40 executing program 1: 18:24:40 executing program 2: 18:24:40 executing program 0: 18:24:40 executing program 4: 18:24:40 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r0, 0x34) 18:24:40 executing program 3: 18:24:40 executing program 2: 18:24:40 executing program 0: 18:24:40 executing program 1: 18:24:40 executing program 2: 18:24:40 executing program 4: 18:24:40 executing program 3: 18:24:40 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r0, 0x34) 18:24:40 executing program 1: 18:24:40 executing program 0: 18:24:40 executing program 4: 18:24:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) 18:24:40 executing program 1: 18:24:40 executing program 3: 18:24:40 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 0: 18:24:40 executing program 4: 18:24:40 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 3: 18:24:40 executing program 0: 18:24:40 executing program 1: 18:24:40 executing program 2: 18:24:40 executing program 4: 18:24:40 executing program 3: 18:24:40 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 0: 18:24:40 executing program 4: 18:24:40 executing program 1: 18:24:40 executing program 2: 18:24:40 executing program 5: wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 4: 18:24:40 executing program 1: 18:24:40 executing program 3: 18:24:40 executing program 0: 18:24:40 executing program 5: wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 2: 18:24:40 executing program 3: 18:24:40 executing program 4: 18:24:40 executing program 0: 18:24:40 executing program 1: 18:24:40 executing program 2: 18:24:40 executing program 5: wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:40 executing program 4: 18:24:40 executing program 3: 18:24:40 executing program 1: 18:24:40 executing program 0: 18:24:40 executing program 2: 18:24:40 executing program 4: 18:24:41 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:41 executing program 1: 18:24:41 executing program 3: 18:24:41 executing program 0: 18:24:41 executing program 2: 18:24:41 executing program 4: 18:24:41 executing program 3: 18:24:41 executing program 1: 18:24:41 executing program 0: 18:24:41 executing program 2: 18:24:41 executing program 4: 18:24:41 executing program 2: 18:24:41 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 18:24:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 18:24:41 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc32f, &(0x7f0000001140)=0x0) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x784, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc000}]) 18:24:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x3}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 18:24:41 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=[{'LINE1', @val={' \'', 'CD Capture', '\' '}}, {'SPEAKER', @val={' \'', 'Mic Capture', '\' '}}], 0x53) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) [ 219.658306][ C0] hrtimer: interrupt took 26142 ns 18:24:41 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) [ 219.687400][T10668] ALSA: mixer_oss: invalid OSS volume '' [ 219.693956][T10668] ALSA: mixer_oss: invalid OSS volume '' 18:24:41 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 219.742596][T10669] ALSA: mixer_oss: invalid OSS volume '' [ 219.757252][T10669] ALSA: mixer_oss: invalid OSS volume '' 18:24:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:24:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xfffffffffffffff1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 18:24:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x14012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x100000001) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), 0xb) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 18:24:41 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:24:41 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_group_source_req(r3, 0x29, 0x4c, 0x0, 0x0) 18:24:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xfffffffffffffff1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 18:24:41 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:41 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc32f, &(0x7f0000001140)=0x0) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x784, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc000}]) 18:24:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') 18:24:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 18:24:41 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fchmod(r0, 0x0) 18:24:41 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fbcf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 18:24:41 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:24:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 18:24:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040888, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x2, 0x4) rmdir(0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x10000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x42042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8040fffffffd) 18:24:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 18:24:42 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 220.253758][ T28] audit: type=1804 audit(1601663082.057:6): pid=10731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/34/bus" dev="sda1" ino=15840 res=1 errno=0 [ 220.257069][T10734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:24:42 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:42 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 18:24:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:24:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040888, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x2, 0x4) rmdir(0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x10000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x42042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8040fffffffd) 18:24:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:24:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:24:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040888, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x2, 0x4) rmdir(0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x10000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x42042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8040fffffffd) 18:24:42 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 221.045614][ T28] audit: type=1804 audit(1601663082.827:7): pid=10773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/34/bus" dev="sda1" ino=15840 res=1 errno=0 18:24:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 221.097213][ T28] audit: type=1804 audit(1601663082.847:8): pid=10772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/34/bus" dev="sda1" ino=15840 res=1 errno=0 18:24:42 executing program 0: socket(0x29, 0x805, 0x90000000) 18:24:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 18:24:42 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 221.182427][ T28] audit: type=1804 audit(1601663082.847:9): pid=10775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/34/bus" dev="sda1" ino=15840 res=1 errno=0 18:24:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 18:24:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) [ 221.346682][ T28] audit: type=1804 audit(1601663082.867:10): pid=10731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/34/bus" dev="sda1" ino=15840 res=1 errno=0 18:24:43 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:43 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 18:24:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x71}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 18:24:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) [ 221.602048][ T28] audit: type=1804 audit(1601663083.097:11): pid=10793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/35/bus" dev="sda1" ino=15857 res=1 errno=0 18:24:43 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(0xffffffffffffffff, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 221.700504][ T28] audit: type=1804 audit(1601663083.267:12): pid=10796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir169026929/syzkaller.JDst1R/47/bus" dev="sda1" ino=15831 res=1 errno=0 18:24:43 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 221.847523][T10814] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 221.874258][T10814] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 18:24:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 18:24:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 18:24:43 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x71}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 222.215889][T10833] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 222.242621][T10833] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 18:24:44 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) [ 222.294462][ T28] audit: type=1804 audit(1601663084.097:13): pid=10837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir624460591/syzkaller.5ovgmg/36/bus" dev="sda1" ino=15826 res=1 errno=0 18:24:44 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 18:24:44 executing program 1: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 18:24:44 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 18:24:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 18:24:44 executing program 1: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 18:24:44 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:44 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 222.674486][ T28] audit: type=1804 audit(1601663084.467:14): pid=10859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir169026929/syzkaller.JDst1R/48/bus" dev="sda1" ino=15846 res=1 errno=0 18:24:44 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0xfffffffffffffffe) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:24:44 executing program 1: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 18:24:44 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 18:24:44 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 18:24:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 18:24:45 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:45 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 223.463517][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd 18:24:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 18:24:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 18:24:45 executing program 5: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = memfd_create(&(0x7f0000000180)='B\'%nod\x05\x00\x00\x1d-v\xcak\xf7\xccX\xe2^)]\x00'/35, 0x0) write(r0, &(0x7f0000002000), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x811, r0, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) tkill(r1, 0x34) 18:24:45 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) [ 223.727582][ T28] audit: type=1804 audit(1601663085.527:15): pid=10907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir169026929/syzkaller.JDst1R/49/bus" dev="sda1" ino=15846 res=1 errno=0 [ 223.752229][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 223.892943][ T5] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 223.917034][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.932000][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.942188][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 223.967934][T10910] ================================================================== [ 223.976032][T10910] BUG: KCSAN: data-race in ext4_handle_inode_extension / ondemand_readahead [ 223.984680][T10910] [ 223.987006][T10910] write to 0xffff8880a61e4bc8 of 8 bytes by task 10907 on cpu 1: [ 223.994820][T10910] ext4_handle_inode_extension+0x214/0x530 [ 224.000633][T10910] ext4_file_write_iter+0xe17/0x1060 [ 224.005912][T10910] do_iter_readv_writev+0x32e/0x3d0 [ 224.011099][T10910] do_iter_write+0x112/0x4b0 [ 224.015688][T10910] vfs_iter_write+0x4c/0x70 [ 224.020193][T10910] iter_file_splice_write+0x41a/0x770 [ 224.025554][T10910] direct_splice_actor+0x95/0x160 [ 224.030568][T10910] splice_direct_to_actor+0x365/0x660 [ 224.036628][T10910] do_splice_direct+0xf2/0x170 [ 224.041382][T10910] do_sendfile+0x56a/0xba0 [ 224.045788][T10910] __x64_sys_sendfile64+0xf2/0x130 [ 224.050893][T10910] do_syscall_64+0x39/0x80 [ 224.055305][T10910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.061960][T10910] [ 224.064293][T10910] read to 0xffff8880a61e4bc8 of 8 bytes by task 10910 on cpu 0: [ 224.071905][T10910] ondemand_readahead+0x475/0x6e0 [ 224.076944][T10910] page_cache_sync_readahead+0x178/0x1a0 [ 224.082602][T10910] generic_file_buffered_read+0x2ec/0x1f60 [ 224.088383][T10910] generic_file_read_iter+0x7d/0x3e0 [ 224.093644][T10910] ext4_file_read_iter+0x2d8/0x420 [ 224.098728][T10910] generic_file_splice_read+0x22b/0x310 [ 224.104265][T10910] splice_direct_to_actor+0x2a8/0x660 [ 224.109615][T10910] do_splice_direct+0xf2/0x170 [ 224.114350][T10910] do_sendfile+0x56a/0xba0 [ 224.118735][T10910] __x64_sys_sendfile64+0xa9/0x130 [ 224.123823][T10910] do_syscall_64+0x39/0x80 [ 224.128235][T10910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.134091][T10910] [ 224.136398][T10910] Reported by Kernel Concurrency Sanitizer on: [ 224.142535][T10910] CPU: 0 PID: 10910 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 [ 224.151172][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.161285][T10910] ================================================================== [ 224.169322][T10910] Kernel panic - not syncing: panic_on_warn set ... [ 224.175889][T10910] CPU: 0 PID: 10910 Comm: syz-executor.0 Not tainted 5.9.0-rc7-syzkaller #0 [ 224.184538][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.195004][T10910] Call Trace: [ 224.198269][T10910] dump_stack+0x10f/0x19d [ 224.202585][T10910] panic+0x207/0x64a [ 224.206465][T10910] ? vprintk_emit+0x44a/0x4f0 [ 224.211118][T10910] kcsan_report+0x684/0x690 [ 224.215596][T10910] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 224.221114][T10910] ? ondemand_readahead+0x475/0x6e0 [ 224.226284][T10910] ? page_cache_sync_readahead+0x178/0x1a0 [ 224.232062][T10910] ? generic_file_buffered_read+0x2ec/0x1f60 [ 224.238019][T10910] ? generic_file_read_iter+0x7d/0x3e0 [ 224.243463][T10910] ? ext4_file_read_iter+0x2d8/0x420 [ 224.248744][T10910] ? generic_file_splice_read+0x22b/0x310 [ 224.254436][T10910] ? splice_direct_to_actor+0x2a8/0x660 [ 224.259955][T10910] ? do_splice_direct+0xf2/0x170 [ 224.264873][T10910] ? do_sendfile+0x56a/0xba0 [ 224.269465][T10910] ? __x64_sys_sendfile64+0xa9/0x130 [ 224.274737][T10910] ? do_syscall_64+0x39/0x80 [ 224.279301][T10910] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.285452][T10910] ? vfs_fsync_range+0x107/0x120 [ 224.290402][T10910] ? __rcu_read_unlock+0x4b/0x260 [ 224.295443][T10910] ? __rcu_read_unlock+0x4b/0x260 [ 224.300443][T10910] kcsan_setup_watchpoint+0x41e/0x4a0 [ 224.305800][T10910] ? __rcu_read_unlock+0x4b/0x260 [ 224.310826][T10910] ondemand_readahead+0x475/0x6e0 [ 224.315838][T10910] ? __rcu_read_unlock+0x4b/0x260 [ 224.320843][T10910] page_cache_sync_readahead+0x178/0x1a0 [ 224.326463][T10910] generic_file_buffered_read+0x2ec/0x1f60 [ 224.332270][T10910] generic_file_read_iter+0x7d/0x3e0 [ 224.337529][T10910] ? aa_file_perm+0x129/0xe00 [ 224.342178][T10910] ext4_file_read_iter+0x2d8/0x420 [ 224.347266][T10910] generic_file_splice_read+0x22b/0x310 [ 224.352794][T10910] ? splice_shrink_spd+0x60/0x60 [ 224.357714][T10910] splice_direct_to_actor+0x2a8/0x660 [ 224.363069][T10910] ? do_splice_direct+0x170/0x170 [ 224.368114][T10910] do_splice_direct+0xf2/0x170 [ 224.372890][T10910] ? wait_task_inactive+0x1b0/0x1f0 [ 224.378070][T10910] do_sendfile+0x56a/0xba0 [ 224.382466][T10910] __x64_sys_sendfile64+0xa9/0x130 [ 224.387561][T10910] do_syscall_64+0x39/0x80 [ 224.391963][T10910] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.397825][T10910] RIP: 0033:0x45dd99 [ 224.401692][T10910] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.421292][T10910] RSP: 002b:00007f977c4a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.429697][T10910] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045dd99 [ 224.437639][T10910] RDX: 0000000020000100 RSI: 0000000000000003 RDI: 0000000000000003 [ 224.445589][T10910] RBP: 000000000118c010 R08: 0000000000000000 R09: 0000000000000000 [ 224.453559][T10910] R10: 00008080ffffff7e R11: 0000000000000246 R12: 000000000118bfd4 [ 224.461770][T10910] R13: 00007fffedeb8f5f R14: 00007f977c4a79c0 R15: 000000000118bfd4 [ 224.470747][T10910] Kernel Offset: disabled [ 224.475065][T10910] Rebooting in 86400 seconds..