[ 43.021393][ T26] audit: type=1800 audit(1572468178.958:27): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.042716][ T26] audit: type=1800 audit(1572468178.958:28): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.754036][ T26] audit: type=1800 audit(1572468179.748:29): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.774835][ T26] audit: type=1800 audit(1572468179.748:30): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.14' (ECDSA) to the list of known hosts. 2019/10/30 20:43:10 fuzzer started 2019/10/30 20:43:11 dialing manager at 10.128.0.26:41537 2019/10/30 20:43:11 checking machine... 2019/10/30 20:43:11 checking revisions... 2019/10/30 20:43:11 testing simple program... syzkaller login: [ 55.533367][ T7964] IPVS: ftp: loaded support on port[0] = 21 2019/10/30 20:43:11 building call list... [ 56.276985][ T7960] can: request_module (can-proto-0) failed. [ 57.147131][ T7960] can: request_module (can-proto-0) failed. 2019/10/30 20:43:18 syscalls: 2541 2019/10/30 20:43:18 code coverage: enabled 2019/10/30 20:43:18 comparison tracing: enabled 2019/10/30 20:43:18 extra coverage: extra coverage is not supported by the kernel 2019/10/30 20:43:18 setuid sandbox: enabled 2019/10/30 20:43:18 namespace sandbox: enabled 2019/10/30 20:43:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/30 20:43:18 fault injection: enabled 2019/10/30 20:43:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/30 20:43:18 net packet injection: enabled 2019/10/30 20:43:18 net device setup: enabled 2019/10/30 20:43:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 20:43:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) 20:43:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) [ 63.926362][ T8008] IPVS: ftp: loaded support on port[0] = 21 [ 64.022356][ T8010] IPVS: ftp: loaded support on port[0] = 21 20:43:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) [ 64.106564][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 64.250247][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.260647][ T8014] IPVS: ftp: loaded support on port[0] = 21 [ 64.268867][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.281442][ T8008] device bridge_slave_0 entered promiscuous mode 20:43:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) [ 64.306737][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.313892][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.322951][ T8008] device bridge_slave_1 entered promiscuous mode [ 64.370480][ T8010] chnl_net:caif_netlink_parms(): no params data found [ 64.408480][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.427218][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.498343][ T8008] team0: Port device team_slave_0 added [ 64.546398][ T8008] team0: Port device team_slave_1 added [ 64.581907][ T8016] IPVS: ftp: loaded support on port[0] = 21 [ 64.589748][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state 20:43:20 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) [ 64.606957][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.618601][ T8010] device bridge_slave_0 entered promiscuous mode [ 64.652047][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.660410][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.668577][ T8010] device bridge_slave_1 entered promiscuous mode [ 64.748642][ T8008] device hsr_slave_0 entered promiscuous mode 20:43:20 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 64.795645][ T8008] device hsr_slave_1 entered promiscuous mode [ 64.873671][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.907419][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 64.941176][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.004424][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.012463][ T8019] IPVS: ftp: loaded support on port[0] = 21 [ 65.013407][ T8021] IPVS: ftp: loaded support on port[0] = 21 [ 65.027924][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.036029][ T8014] device bridge_slave_0 entered promiscuous mode [ 65.058138][ T8010] team0: Port device team_slave_0 added [ 65.074561][ T8010] team0: Port device team_slave_1 added [ 65.095498][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.102577][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.119354][ T8014] device bridge_slave_1 entered promiscuous mode [ 65.349756][ T8010] device hsr_slave_0 entered promiscuous mode [ 65.418300][ T8010] device hsr_slave_1 entered promiscuous mode [ 65.438528][ T8010] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.480038][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.583263][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.614515][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.685713][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 65.719108][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.738445][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.777782][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.833075][ T8014] team0: Port device team_slave_0 added [ 65.899452][ T8014] team0: Port device team_slave_1 added [ 65.936409][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.956198][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.989196][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.996728][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.082651][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 66.092211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.119581][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.139815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.159176][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.166305][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.206715][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.226716][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.259703][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.286632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.319648][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.328664][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.353041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.367636][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.386093][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.393194][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.402759][ T8016] device bridge_slave_0 entered promiscuous mode [ 66.413692][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.420825][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.428657][ T8016] device bridge_slave_1 entered promiscuous mode [ 66.448713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.456987][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.465629][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.506900][ T8014] device hsr_slave_0 entered promiscuous mode [ 66.545727][ T8014] device hsr_slave_1 entered promiscuous mode [ 66.595518][ T8014] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.614995][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.629443][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.638967][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 66.712272][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.738435][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.753998][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.770015][ T8019] device bridge_slave_0 entered promiscuous mode [ 66.798848][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.815464][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.834169][ T8019] device bridge_slave_1 entered promiscuous mode [ 66.902820][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.963090][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.003592][ T8016] team0: Port device team_slave_0 added [ 67.023848][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.058659][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.068639][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.098282][ T8021] device bridge_slave_0 entered promiscuous mode [ 67.144552][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.175227][ T8016] team0: Port device team_slave_1 added [ 67.188052][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.195133][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.219253][ T8021] device bridge_slave_1 entered promiscuous mode [ 67.230114][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.242381][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.261671][ T8019] team0: Port device team_slave_0 added [ 67.299070][ T8019] team0: Port device team_slave_1 added [ 67.324413][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.344191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.374384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.388562][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.395703][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.437453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.452156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.462916][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.470058][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.499787][ T8010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.510388][ T8010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.577923][ T8016] device hsr_slave_0 entered promiscuous mode [ 67.615796][ T8016] device hsr_slave_1 entered promiscuous mode [ 67.655458][ T8016] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.681332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.694375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.707264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.716634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.729587][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.738808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.747666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.756974][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.765460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.774023][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.782516][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.792201][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.803572][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.877924][ T8019] device hsr_slave_0 entered promiscuous mode [ 67.939201][ T8019] device hsr_slave_1 entered promiscuous mode [ 67.987406][ T8019] debugfs: Directory 'hsr0' with parent '/' already present! [ 68.000537][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.011879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.050932][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.175128][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.221353][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.270141][ T8021] team0: Port device team_slave_0 added [ 68.308751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 20:43:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 68.326858][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.379264][ T8021] team0: Port device team_slave_1 added [ 68.476375][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.485006][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.526468][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.533552][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state 20:43:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 68.615630][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.632300][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.696001][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.703092][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.785560][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.794307][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.856128][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 20:43:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 68.906188][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.914650][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.998399][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 20:43:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 69.041846][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 20:43:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 69.188024][ T8021] device hsr_slave_0 entered promiscuous mode [ 69.225625][ T8021] device hsr_slave_1 entered promiscuous mode [ 69.300823][ T8021] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.332881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:43:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 69.351281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 20:43:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 69.402529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.412161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.423089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.443224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.469152][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.497798][ T8014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.515687][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.530156][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.552222][ T8206] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 69.557435][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.569969][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.579069][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.586206][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.646365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.654332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.664708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 20:43:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) [ 69.690762][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.697901][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.708177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.734819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.752977][ T8215] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 69.772135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.796892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.811966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.820947][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.836247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.854410][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.880365][ T8016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.925419][ T8016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.972610][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.998053][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.032771][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.070952][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.121167][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.172554][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.182204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.226334][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.247556][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.260836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.301282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.310520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.360831][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.367979][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.416597][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.424565][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.446426][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.464695][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.471830][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.515648][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.524286][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.538860][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.555947][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.564654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.613001][ T8019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.635902][ T8019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.654894][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 20:43:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) [ 70.663314][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.672229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.682966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.691928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.700474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.714437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.726667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.735001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.742804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.751798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.792180][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.828492][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.840788][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.849891][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.857100][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.864816][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.874121][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.883013][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state 20:43:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 70.890251][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.901713][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.922501][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.931849][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.949530][ T8021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.960894][ T8021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.991545][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.001548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.021603][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.032741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.041992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.050779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.060728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.069355][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.077845][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.087327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.106414][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.285595][ C0] hrtimer: interrupt took 29246 ns 20:43:27 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 20:43:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) 20:43:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) 20:43:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 20:43:27 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 71.525170][ T8291] netlink: 'syz-executor.1': attribute type 23 has an invalid length. 20:43:27 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:27 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) 20:43:27 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:27 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) [ 71.906376][ T8335] netlink: 'syz-executor.1': attribute type 23 has an invalid length. 20:43:27 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 0: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 2: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 2: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 0: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 2: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 0: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfff, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a2"], 0x1) read$FUSE(r2, &(0x7f00000012c0), 0x1000) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7}, 0x302) close(r1) 20:43:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:28 executing program 5: clock_adjtime(0x0, &(0x7f00000002c0)={0x22e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 20:43:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 20:43:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) 20:43:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 20:43:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) 20:43:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000001e8, 0x0, 0x0, 0x0) 20:43:29 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="10d2aa58293facebe5e5904f66e22ed4", 0x10) [ 73.215684][ T8511] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 20:43:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:43:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 20:43:29 executing program 0: socket$inet(0x2, 0x4000020000000001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 20:43:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) 20:43:29 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="10d2aa58293facebe5e5904f66e22ed4", 0x10) [ 73.451846][ T8534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:43:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000230001000000000b0000000004000019140017000c000000000000000000ffff00001d023a74cd0000"], 0x28}}, 0x0) 20:43:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:43:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:43:29 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="10d2aa58293facebe5e5904f66e22ed4", 0x10) 20:43:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000) [ 73.609375][ T8550] netlink: 'syz-executor.5': attribute type 23 has an invalid length. [ 73.636691][ T8548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:43:29 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="10d2aa58293facebe5e5904f66e22ed4", 0x10) 20:43:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 20:43:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 73.811907][ T8559] ------------[ cut here ]------------ [ 73.817573][ T8559] WARNING: CPU: 0 PID: 8559 at ./include/net/sock.h:666 smc_unhash_sk+0x20d/0x230 [ 73.822775][ T3901] kobject: 'loop1' (00000000a2c1de9b): kobject_uevent_env [ 73.826777][ T8559] Kernel panic - not syncing: panic_on_warn set ... [ 73.826796][ T8559] CPU: 0 PID: 8559 Comm: syz-executor.4 Not tainted 5.4.0-rc5+ #0 [ 73.826802][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.826809][ T8559] Call Trace: [ 73.826824][ T8559] dump_stack+0x1d8/0x2f8 [ 73.826835][ T8559] panic+0x264/0x7a9 [ 73.850661][ T3901] kobject: 'loop1' (00000000a2c1de9b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 73.858426][ T8559] ? __warn+0x105/0x210 [ 73.858442][ T8559] ? smc_unhash_sk+0x20d/0x230 [ 73.858453][ T8559] __warn+0x20e/0x210 [ 73.858463][ T8559] ? smc_unhash_sk+0x20d/0x230 [ 73.858475][ T8559] report_bug+0x1b6/0x2f0 [ 73.858484][ T8559] ? smc_unhash_sk+0x20d/0x230 [ 73.858496][ T8559] do_error_trap+0xd7/0x440 20:43:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 73.858508][ T8559] do_invalid_op+0x36/0x40 [ 73.858521][ T8559] ? smc_unhash_sk+0x20d/0x230 [ 73.920600][ T8559] invalid_op+0x23/0x30 [ 73.924776][ T8559] RIP: 0010:smc_unhash_sk+0x20d/0x230 [ 73.930145][ T8559] Code: ba ff ff ff ff e8 33 f9 94 fe 48 8b 5d c8 48 89 df e8 a7 e9 39 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 23 0f 34 fa <0f> 0b eb 93 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 69 ff ff ff 4c [ 73.949745][ T8559] RSP: 0018:ffff88806e68fc30 EFLAGS: 00010293 [ 73.955545][ T3901] kobject: 'loop5' (0000000077b2e0ac): kobject_uevent_env [ 73.955815][ T8559] RAX: ffffffff873f344d RBX: 0000000000000001 RCX: ffff88806e7a2500 [ 73.962947][ T3901] kobject: 'loop5' (0000000077b2e0ac): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 73.970869][ T8559] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 73.970875][ T8559] RBP: ffff88806e68fc78 R08: ffffffff873f33da R09: ffffed101256a261 [ 73.970880][ T8559] R10: ffffed101256a261 R11: 0000000000000000 R12: ffff888092b51280 [ 73.970884][ T8559] R13: dffffc0000000000 R14: ffff888092b51300 R15: ffff888092b512a8 [ 73.970904][ T8559] ? smc_unhash_sk+0x19a/0x230 [ 73.970911][ T8559] ? smc_unhash_sk+0x20d/0x230 [ 73.970929][ T8559] __smc_release+0x1f8/0x3a0 [ 73.970942][ T8559] smc_release+0x15b/0x2c0 [ 74.031624][ T8559] sock_close+0xe1/0x260 [ 74.035864][ T8559] ? sock_mmap+0xa0/0xa0 [ 74.040191][ T8559] __fput+0x2e4/0x740 [ 74.044772][ T8559] ____fput+0x15/0x20 [ 74.048737][ T8559] task_work_run+0x17e/0x1b0 [ 74.053315][ T8559] prepare_exit_to_usermode+0x459/0x580 [ 74.058935][ T8559] syscall_return_slowpath+0x113/0x4a0 [ 74.064556][ T8559] do_syscall_64+0x11f/0x1c0 [ 74.069258][ T8559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.075156][ T8559] RIP: 0033:0x413ae1 [ 74.079043][ T8559] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 74.098634][ T8559] RSP: 002b:00007ffe6e41e040 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.107249][ T8559] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413ae1 [ 74.115267][ T8559] RDX: 0000001b30e20000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.123322][ T8559] RBP: 0000000000000001 R08: ffffffff81626917 R09: 000000008d70a52f [ 74.131368][ T8559] R10: 00007ffe6e41e120 R11: 0000000000000293 R12: 000000000075bf20 [ 74.139330][ T8559] R13: 0000000000012025 R14: 00000000007602a8 R15: 000000000075bf2c [ 74.147427][ T8559] ? stack_trace_consume_entry+0x27/0x260 [ 74.154664][ T8559] Kernel Offset: disabled [ 74.159068][ T8559] Rebooting in 86400 seconds..