Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Daily Cleanup of Temporary Directories. [ OK ] Reached target Timers. Starting Permit User Sessions... [ OK ] Started Regular background program processing daemon. [ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. 2020/11/19 16:05:16 fuzzer started 2020/11/19 16:05:17 dialing manager at 10.128.0.26:35859 2020/11/19 16:05:17 syscalls: 3447 2020/11/19 16:05:17 code coverage: enabled 2020/11/19 16:05:17 comparison tracing: enabled 2020/11/19 16:05:17 extra coverage: enabled 2020/11/19 16:05:17 setuid sandbox: enabled 2020/11/19 16:05:17 namespace sandbox: enabled 2020/11/19 16:05:17 Android sandbox: enabled 2020/11/19 16:05:17 fault injection: enabled 2020/11/19 16:05:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/19 16:05:17 net packet injection: enabled 2020/11/19 16:05:17 net device setup: enabled 2020/11/19 16:05:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/19 16:05:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/19 16:05:17 USB emulation: enabled 2020/11/19 16:05:17 hci packet injection: enabled 2020/11/19 16:05:17 wifi device emulation: enabled 16:08:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hpfs(&(0x7f0000000200)='hpfs\x00', 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)='m', 0x1, 0x7}], 0x0, &(0x7f0000000300)={[{}]}) syzkaller login: [ 262.250213][ T34] audit: type=1400 audit(1605802102.551:8): avc: denied { execmem } for pid=8484 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:08:22 executing program 1: shmget$private(0x0, 0x3000, 0x78000878, &(0x7f0000ffc000/0x3000)=nil) 16:08:22 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000001800)='/dev/input/mice\x00', 0x0) 16:08:23 executing program 3: socketpair(0x29, 0x2, 0x0, &(0x7f0000000080)) 16:08:23 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb1, 0x65, 0x38, 0x40, 0x489, 0xe036, 0x9f17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xa3, 0xe7}}]}}]}}, 0x0) 16:08:23 executing program 5: syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) listen(r0, 0x0) unshare(0x42000200) r1 = accept(r0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x100002000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000001c0)={0x3, 0x100, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0xcc1}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000100)=0x55) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x3f00) syz_open_dev$sndctrl(0x0, 0x5, 0x101000) [ 263.539748][ T8485] IPVS: ftp: loaded support on port[0] = 21 [ 263.803215][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 264.040095][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 264.130558][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 264.272014][ T8491] IPVS: ftp: loaded support on port[0] = 21 [ 264.397105][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.404251][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.413889][ T8485] device bridge_slave_0 entered promiscuous mode [ 264.427841][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.435639][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.465788][ T8485] device bridge_slave_1 entered promiscuous mode [ 264.591681][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.659874][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.669896][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 264.770828][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 264.788939][ T8485] team0: Port device team_slave_0 added [ 264.834132][ T8485] team0: Port device team_slave_1 added [ 264.920718][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.928849][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.955046][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.982325][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 265.011898][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.021712][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.059331][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.072021][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.080068][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.088637][ T8487] device bridge_slave_0 entered promiscuous mode [ 265.152714][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.161871][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.186302][ T8487] device bridge_slave_1 entered promiscuous mode [ 265.240423][ T8542] IPVS: ftp: loaded support on port[0] = 21 [ 265.243417][ T8485] device hsr_slave_0 entered promiscuous mode [ 265.257743][ T8485] device hsr_slave_1 entered promiscuous mode [ 265.345390][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.393815][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.418412][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.425899][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.433744][ T8489] device bridge_slave_0 entered promiscuous mode [ 265.446263][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.453416][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.461870][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 265.463894][ T8489] device bridge_slave_1 entered promiscuous mode [ 265.556289][ T8487] team0: Port device team_slave_0 added [ 265.566618][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.603313][ T8487] team0: Port device team_slave_1 added [ 265.612331][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.623524][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.631596][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.640984][ T8491] device bridge_slave_0 entered promiscuous mode [ 265.658172][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.668058][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.676499][ T8491] device bridge_slave_1 entered promiscuous mode [ 265.745317][ T8489] team0: Port device team_slave_0 added [ 265.774544][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.781565][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.807816][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 265.809978][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.828246][ T8489] team0: Port device team_slave_1 added [ 265.836341][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.843335][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.869677][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.902517][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.934362][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 265.964215][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.010631][ T8487] device hsr_slave_0 entered promiscuous mode [ 266.019286][ T8487] device hsr_slave_1 entered promiscuous mode [ 266.026593][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.035638][ T8487] Cannot create hsr debugfs directory [ 266.076232][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.083255][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.110791][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.173823][ T8491] team0: Port device team_slave_0 added [ 266.185770][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 266.186888][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.203512][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.230337][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.278202][ T8491] team0: Port device team_slave_1 added [ 266.318558][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.361351][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.369609][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.395782][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.407636][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 266.423084][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.445376][ T8489] device hsr_slave_0 entered promiscuous mode [ 266.452418][ T8489] device hsr_slave_1 entered promiscuous mode [ 266.459365][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.467643][ T8489] Cannot create hsr debugfs directory [ 266.480237][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.487347][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.515781][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.538086][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.591876][ T8491] device hsr_slave_0 entered promiscuous mode [ 266.599325][ T8491] device hsr_slave_1 entered promiscuous mode [ 266.607788][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.615982][ T8491] Cannot create hsr debugfs directory [ 266.639562][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.813790][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.821373][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.830803][ T8542] device bridge_slave_0 entered promiscuous mode [ 266.877576][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.893365][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.902222][ T8542] device bridge_slave_1 entered promiscuous mode [ 266.972518][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.997360][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.058452][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 267.110239][ T8542] team0: Port device team_slave_0 added [ 267.118102][ T8487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.138881][ T8542] team0: Port device team_slave_1 added [ 267.157112][ T8487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.199444][ T8487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.212913][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.220353][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.246483][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.263469][ T8487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.279235][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.287503][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.317317][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.402698][ T8542] device hsr_slave_0 entered promiscuous mode [ 267.411121][ T8542] device hsr_slave_1 entered promiscuous mode [ 267.418423][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.426425][ T8542] Cannot create hsr debugfs directory [ 267.437320][ T8489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.453573][ T8489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.505880][ T8489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.516763][ T8489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.544084][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 267.624846][ T8491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.677621][ T8491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.689474][ T8491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.710633][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.730715][ T8491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.797210][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.823532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.840026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.854535][ T3145] Bluetooth: hci1: command 0x041b tx timeout [ 267.895023][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.930094][ T8542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.987840][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.997181][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.006924][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.014535][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.014580][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 268.024820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.039048][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.047649][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.054828][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.063125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.072885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.082064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.090258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.099455][ T8542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.128416][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.147599][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.157222][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.166733][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.180368][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.190872][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.200324][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.209433][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.219038][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.227629][ T8542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.245238][ T8542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.259688][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 268.280980][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.293581][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.312665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.323097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.332572][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.339762][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.349758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.359097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.400772][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.410560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.419881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.429490][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.436639][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.453458][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.490793][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.501352][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.510208][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.539977][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.559863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.596903][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.618005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.627920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.637189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.646917][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.656385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.666044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.674765][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.683479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.692721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.700870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.709155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.718156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.727493][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.734675][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.742771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.751601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.769741][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.786690][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.818051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.829059][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.840357][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.847636][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.878581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.891816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.902572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.911867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.920662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.938726][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.949921][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.960818][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.974485][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.007482][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.017268][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.029082][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.063645][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.081355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.093643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.102407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.111896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.120708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.129781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.133930][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 269.139057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.153155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.161831][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.169830][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.177584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.186540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.195218][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.202300][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.231648][ T8485] device veth0_vlan entered promiscuous mode [ 269.257869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.267112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.276071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.284258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.292663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.301888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.311772][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.321028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.331491][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.341302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.363865][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.375718][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.415238][ T8485] device veth1_vlan entered promiscuous mode [ 269.430881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.442185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.453500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.467169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.476672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.509407][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.526924][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.536933][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.547595][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.556468][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.565334][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.574727][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.586310][ T8487] device veth0_vlan entered promiscuous mode [ 269.601000][ T8491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.612704][ T8491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.620178][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 269.650201][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.662307][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.670957][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.684551][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.692880][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.708562][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.717351][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.724517][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.736155][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.746429][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.757836][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.765011][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.777519][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.786860][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.802533][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.829089][ T8485] device veth0_macvtap entered promiscuous mode [ 269.845903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.855534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.867675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.876347][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.883966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.910324][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.932160][ T8485] device veth1_macvtap entered promiscuous mode [ 269.943370][ T8487] device veth1_vlan entered promiscuous mode [ 269.950405][ T9032] Bluetooth: hci1: command 0x040f tx timeout [ 269.966977][ T8542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.979125][ T8542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.991605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.000288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.009070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.019563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.028660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.040047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.049675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.058788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.068786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.078023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.098548][ T9581] Bluetooth: hci2: command 0x040f tx timeout [ 270.128523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.157613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.175042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.201103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.221799][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.254789][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.262359][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.305656][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.331386][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.334601][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 270.352485][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.362440][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.379250][ T8487] device veth0_macvtap entered promiscuous mode [ 270.401669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.410320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.420929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.430271][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.439653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.449136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.457811][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.479649][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.491080][ T8489] device veth0_vlan entered promiscuous mode [ 270.507030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.515896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.523577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.532261][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.546632][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.556072][ T8487] device veth1_macvtap entered promiscuous mode [ 270.577674][ T8485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.588084][ T8485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.600799][ T8485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.611172][ T8485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.656761][ T8489] device veth1_vlan entered promiscuous mode [ 270.674903][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.685681][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.702744][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.714145][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.725833][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.769184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.780819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.796481][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.808208][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.821042][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.845694][ T8491] device veth0_vlan entered promiscuous mode [ 270.862996][ T8491] device veth1_vlan entered promiscuous mode [ 270.874321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.883196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.898223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.909478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.921737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.936005][ T8487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.947621][ T8487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.956483][ T8487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.965320][ T8487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.004916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.013143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.095727][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.105661][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.115114][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.131097][ T8489] device veth0_macvtap entered promiscuous mode [ 271.193730][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.202525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.214460][ T9581] Bluetooth: hci5: command 0x040f tx timeout [ 271.230215][ T8489] device veth1_macvtap entered promiscuous mode [ 271.290221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.304353][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.367969][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.372376][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.393515][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.400933][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.417752][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 271.432193][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.450527][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.508281][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.540957][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.552734][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 271.563997][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.577353][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.588195][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.596226][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.605991][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.617071][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.626398][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.636252][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.646061][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.669708][ T8491] device veth0_macvtap entered promiscuous mode [ 271.694675][ T9581] Bluetooth: hci0: command 0x0419 tx timeout [ 271.698048][ T8489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.730225][ T8489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.744904][ T8489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.754886][ T8489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.791278][ T8542] device veth0_vlan entered promiscuous mode [ 271.826217][ T8491] device veth1_macvtap entered promiscuous mode [ 271.838213][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.850743][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.854423][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.861065][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.878626][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.913935][ T8542] device veth1_vlan entered promiscuous mode [ 271.972285][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.981421][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.990147][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.998796][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.017490][ T5] Bluetooth: hci1: command 0x0419 tx timeout [ 272.022308][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.032469][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.056014][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.066651][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.079399][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.090324][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.102130][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.117766][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.130571][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.156020][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.168562][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.174735][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 272.179143][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.198665][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.216645][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.239054][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.260924][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.293239][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.309404][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.321441][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.335320][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.355250][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.372594][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.401725][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.414391][ T9581] Bluetooth: hci3: command 0x0419 tx timeout [ 272.416106][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.431816][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.461037][ T8542] device veth0_macvtap entered promiscuous mode 16:08:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hpfs(&(0x7f0000000200)='hpfs\x00', 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)='m', 0x1, 0x7}], 0x0, &(0x7f0000000300)={[{}]}) [ 272.506467][ T8491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.527974][ T8491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.545507][ T8491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.564177][ T8491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.591444][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.605163][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.620990][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.639324][ T8542] device veth1_macvtap entered promiscuous mode 16:08:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hpfs(&(0x7f0000000200)='hpfs\x00', 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)='m', 0x1, 0x7}], 0x0, &(0x7f0000000300)={[{}]}) [ 272.744170][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.770058][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:08:33 executing program 1: 16:08:33 executing program 1: [ 272.884358][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.923353][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.958317][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.979590][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.991869][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.009910][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.022172][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.034983][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.047318][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 16:08:33 executing program 0: [ 273.064462][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.072703][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.086347][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.120540][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.146179][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.163884][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:08:33 executing program 1: [ 273.193004][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.202873][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 16:08:33 executing program 0: [ 273.251012][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.283653][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 16:08:33 executing program 1: [ 273.296306][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 273.304842][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.316228][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.361739][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.404761][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.438637][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.449820][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.462385][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.508066][ T8542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.548766][ T8542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.578793][ T8542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.589933][ T8542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.617852][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 16:08:34 executing program 2: [ 273.676283][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.757338][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.777687][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.798755][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.827745][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.975957][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.009078][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:08:34 executing program 3: [ 274.050641][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.080452][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.106612][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.128132][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.277203][ T9723] IPVS: ftp: loaded support on port[0] = 21 [ 274.326080][ T34] audit: type=1400 audit(1605802114.634:9): avc: denied { write } for pid=9720 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 274.402776][ C0] hrtimer: interrupt took 61287 ns [ 274.524197][ T9721] IPVS: ftp: loaded support on port[0] = 21 [ 279.015608][ T9778] IPVS: ftp: loaded support on port[0] = 21 [ 279.256025][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 279.335242][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.342744][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.350628][ T9778] device bridge_slave_0 entered promiscuous mode [ 279.360583][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.369470][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.379032][ T9778] device bridge_slave_1 entered promiscuous mode [ 279.403517][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.415098][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.445537][ T9778] team0: Port device team_slave_0 added [ 279.458446][ T9778] team0: Port device team_slave_1 added [ 279.480422][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.487951][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.516149][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.529044][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.537511][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.564410][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.601537][ T9778] device hsr_slave_0 entered promiscuous mode [ 279.608436][ T9778] device hsr_slave_1 entered promiscuous mode [ 279.617244][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.625771][ T9778] Cannot create hsr debugfs directory [ 279.750804][ T9778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.760888][ T9778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.773778][ T9778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.787030][ T9778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.825902][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.833296][ T9778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.841296][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.848466][ T9778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.913654][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.936331][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.944713][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.954067][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.963172][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 279.979554][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.995310][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.004111][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.011204][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.028653][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.037987][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.054483][ T9594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.080682][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.090084][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.123094][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.133333][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.145759][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.163549][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.188150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.196268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.213968][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.288857][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.298415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.325734][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.336095][ T9581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.348463][ T9778] device veth0_vlan entered promiscuous mode [ 280.356568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.365191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.387854][ T9778] device veth1_vlan entered promiscuous mode [ 280.418546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.427947][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.437905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.447064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.460129][ T9778] device veth0_macvtap entered promiscuous mode [ 280.476635][ T9778] device veth1_macvtap entered promiscuous mode [ 280.505250][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.516079][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.526832][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.537781][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.547848][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.559064][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.570072][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.581192][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.594772][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.605566][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.616806][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.627388][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.636121][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.645491][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.655612][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.669079][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.679738][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.690422][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.701588][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.715066][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.726121][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.736418][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.747354][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.757631][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.768535][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.780737][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.790625][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.799786][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.813262][ T9778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.826262][ T9778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.835112][ T9778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.844218][ T9778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.948413][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.980920][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.003144][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.029479][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.038941][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.051288][ T9594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.059330][ T2991] Bluetooth: hci4: command 0x0409 tx timeout [ 281.412037][ T9594] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 281.942054][ T9594] usb 5-1: New USB device found, idVendor=0489, idProduct=e036, bcdDevice=9f.17 [ 281.951459][ T9594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.960665][ T9594] usb 5-1: Product: syz [ 281.965966][ T9594] usb 5-1: Manufacturer: syz [ 281.970593][ T9594] usb 5-1: SerialNumber: syz [ 281.992008][ T9594] usb 5-1: config 0 descriptor?? [ 282.243133][ T2991] usb 5-1: USB disconnect, device number 2 [ 283.041562][ T9594] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 283.131809][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 283.571536][ T9594] usb 5-1: New USB device found, idVendor=0489, idProduct=e036, bcdDevice=9f.17 [ 283.580891][ T9594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.590542][ T9594] usb 5-1: Product: syz [ 283.595669][ T9594] usb 5-1: Manufacturer: syz [ 283.600275][ T9594] usb 5-1: SerialNumber: syz [ 283.612988][ T9594] usb 5-1: config 0 descriptor?? 16:08:44 executing program 4: syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) listen(r0, 0x0) unshare(0x42000200) r1 = accept(r0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x100002000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000001c0)={0x3, 0x100, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0xcc1}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000100)=0x55) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x3f00) syz_open_dev$sndctrl(0x0, 0x5, 0x101000) [ 283.854557][ T9594] usb 5-1: USB disconnect, device number 3 16:08:44 executing program 1: 16:08:44 executing program 0: 16:08:44 executing program 2: 16:08:44 executing program 3: 16:08:44 executing program 5: syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) listen(r0, 0x0) unshare(0x42000200) r1 = accept(r0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x100002000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000001c0)={0x3, 0x100, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0xcc1}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000100)=0x55) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x3f00) syz_open_dev$sndctrl(0x0, 0x5, 0x101000) 16:08:44 executing program 1: 16:08:44 executing program 2: 16:08:44 executing program 3: 16:08:44 executing program 0: [ 284.069056][T10057] IPVS: ftp: loaded support on port[0] = 21 [ 284.104991][T10058] IPVS: ftp: loaded support on port[0] = 21 16:08:44 executing program 0: 16:08:44 executing program 3: 16:08:44 executing program 4: 16:08:44 executing program 2: 16:08:44 executing program 1: 16:08:44 executing program 0: 16:08:44 executing program 3: 16:08:45 executing program 5: syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) listen(r0, 0x0) unshare(0x42000200) r1 = accept(r0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x100002000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000001c0)={0x3, 0x100, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0xcc1}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000100)=0x55) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x3f00) syz_open_dev$sndctrl(0x0, 0x5, 0x101000) 16:08:45 executing program 2: 16:08:45 executing program 3: 16:08:45 executing program 1: 16:08:45 executing program 0: 16:08:45 executing program 4: 16:08:45 executing program 2: 16:08:45 executing program 1: 16:08:45 executing program 4: 16:08:45 executing program 3: 16:08:45 executing program 0: [ 285.073633][T10125] IPVS: ftp: loaded support on port[0] = 21 16:08:45 executing program 0: [ 285.211548][ T2991] Bluetooth: hci4: command 0x040f tx timeout 16:08:45 executing program 5: syz_open_dev$rtc(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc0000, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) listen(r0, 0x0) unshare(0x42000200) r1 = accept(r0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x100002000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000001c0)={0x3, 0x100, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0xcc1}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000003c0)=""/85, &(0x7f0000000100)=0x55) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[], 0x3f00) syz_open_dev$sndctrl(0x0, 0x5, 0x101000) 16:08:45 executing program 1: 16:08:45 executing program 4: 16:08:45 executing program 3: 16:08:45 executing program 2: 16:08:45 executing program 0: 16:08:45 executing program 1: 16:08:45 executing program 0: 16:08:45 executing program 2: 16:08:45 executing program 4: 16:08:45 executing program 3: [ 285.694631][T10165] IPVS: ftp: loaded support on port[0] = 21 16:08:46 executing program 0: 16:08:46 executing program 1: 16:08:46 executing program 5: 16:08:46 executing program 0: 16:08:46 executing program 4: 16:08:46 executing program 3: 16:08:46 executing program 2: 16:08:46 executing program 3: 16:08:46 executing program 0: 16:08:46 executing program 4: 16:08:46 executing program 2: 16:08:46 executing program 1: 16:08:46 executing program 5: 16:08:46 executing program 3: 16:08:46 executing program 2: 16:08:46 executing program 4: 16:08:46 executing program 0: 16:08:46 executing program 1: 16:08:46 executing program 5: 16:08:46 executing program 3: 16:08:47 executing program 2: 16:08:47 executing program 0: 16:08:47 executing program 4: 16:08:47 executing program 1: 16:08:47 executing program 5: 16:08:47 executing program 3: 16:08:47 executing program 2: 16:08:47 executing program 4: 16:08:47 executing program 0: 16:08:47 executing program 1: 16:08:47 executing program 5: 16:08:47 executing program 3: 16:08:47 executing program 2: 16:08:47 executing program 4: 16:08:47 executing program 0: 16:08:47 executing program 1: 16:08:47 executing program 5: 16:08:47 executing program 3: 16:08:47 executing program 2: [ 287.291140][ T7] Bluetooth: hci4: command 0x0419 tx timeout 16:08:47 executing program 4: 16:08:47 executing program 0: 16:08:47 executing program 1: 16:08:47 executing program 5: 16:08:47 executing program 3: 16:08:47 executing program 2: 16:08:47 executing program 4: 16:08:48 executing program 3: 16:08:48 executing program 0: 16:08:48 executing program 1: 16:08:48 executing program 5: 16:08:48 executing program 2: 16:08:48 executing program 4: 16:08:48 executing program 3: 16:08:48 executing program 0: 16:08:48 executing program 1: 16:08:48 executing program 5: 16:08:48 executing program 2: 16:08:48 executing program 4: 16:08:48 executing program 3: 16:08:48 executing program 1: 16:08:48 executing program 0: 16:08:48 executing program 2: 16:08:48 executing program 5: 16:08:48 executing program 3: 16:08:48 executing program 2: 16:08:48 executing program 4: 16:08:48 executing program 1: 16:08:48 executing program 0: 16:08:48 executing program 5: 16:08:48 executing program 2: 16:08:48 executing program 3: 16:08:48 executing program 1: 16:08:48 executing program 4: 16:08:48 executing program 5: 16:08:48 executing program 0: 16:08:49 executing program 2: 16:08:49 executing program 1: 16:08:49 executing program 3: 16:08:49 executing program 4: 16:08:49 executing program 5: 16:08:49 executing program 0: 16:08:49 executing program 3: 16:08:49 executing program 1: 16:08:49 executing program 5: 16:08:49 executing program 2: 16:08:49 executing program 4: 16:08:49 executing program 0: 16:08:49 executing program 2: 16:08:49 executing program 3: 16:08:49 executing program 5: 16:08:49 executing program 0: 16:08:49 executing program 4: 16:08:49 executing program 1: 16:08:49 executing program 2: 16:08:49 executing program 5: 16:08:49 executing program 3: 16:08:49 executing program 4: 16:08:49 executing program 1: 16:08:49 executing program 0: 16:08:49 executing program 2: 16:08:49 executing program 3: 16:08:49 executing program 1: 16:08:49 executing program 5: 16:08:49 executing program 4: 16:08:49 executing program 0: 16:08:50 executing program 2: 16:08:50 executing program 5: 16:08:50 executing program 1: 16:08:50 executing program 3: 16:08:50 executing program 4: 16:08:50 executing program 0: 16:08:50 executing program 5: 16:08:50 executing program 2: 16:08:50 executing program 1: 16:08:50 executing program 3: 16:08:50 executing program 4: 16:08:50 executing program 0: 16:08:50 executing program 5: 16:08:50 executing program 2: 16:08:50 executing program 1: 16:08:50 executing program 3: 16:08:50 executing program 4: 16:08:50 executing program 0: 16:08:50 executing program 5: 16:08:50 executing program 2: 16:08:50 executing program 3: 16:08:50 executing program 1: 16:08:50 executing program 4: 16:08:50 executing program 0: 16:08:50 executing program 5: 16:08:50 executing program 2: 16:08:50 executing program 1: 16:08:50 executing program 3: 16:08:51 executing program 4: 16:08:51 executing program 0: 16:08:51 executing program 5: 16:08:51 executing program 3: 16:08:51 executing program 1: 16:08:51 executing program 2: 16:08:51 executing program 4: 16:08:51 executing program 0: 16:08:51 executing program 5: 16:08:51 executing program 1: 16:08:51 executing program 3: 16:08:51 executing program 2: 16:08:51 executing program 4: 16:08:51 executing program 0: 16:08:51 executing program 5: 16:08:51 executing program 2: 16:08:51 executing program 1: 16:08:51 executing program 3: 16:08:51 executing program 4: 16:08:51 executing program 0: 16:08:51 executing program 5: 16:08:51 executing program 3: 16:08:51 executing program 1: 16:08:51 executing program 2: 16:08:51 executing program 4: 16:08:51 executing program 5: 16:08:51 executing program 0: 16:08:52 executing program 1: 16:08:52 executing program 3: 16:08:52 executing program 2: 16:08:52 executing program 4: 16:08:52 executing program 5: 16:08:52 executing program 0: 16:08:52 executing program 1: 16:08:52 executing program 2: 16:08:52 executing program 3: 16:08:52 executing program 5: 16:08:52 executing program 4: 16:08:52 executing program 0: 16:08:52 executing program 1: 16:08:52 executing program 3: 16:08:52 executing program 2: 16:08:52 executing program 4: 16:08:52 executing program 5: 16:08:52 executing program 3: 16:08:52 executing program 0: 16:08:52 executing program 2: 16:08:52 executing program 1: 16:08:52 executing program 5: 16:08:52 executing program 4: 16:08:52 executing program 3: 16:08:52 executing program 0: 16:08:52 executing program 2: 16:08:52 executing program 1: 16:08:53 executing program 4: 16:08:53 executing program 5: 16:08:53 executing program 3: 16:08:53 executing program 0: 16:08:53 executing program 2: 16:08:53 executing program 1: 16:08:53 executing program 4: 16:08:53 executing program 2: 16:08:53 executing program 3: 16:08:53 executing program 5: 16:08:53 executing program 0: 16:08:53 executing program 1: 16:08:53 executing program 4: 16:08:53 executing program 3: 16:08:53 executing program 5: 16:08:53 executing program 2: 16:08:53 executing program 0: 16:08:53 executing program 1: 16:08:53 executing program 3: 16:08:53 executing program 4: 16:08:53 executing program 5: 16:08:53 executing program 2: 16:08:53 executing program 0: 16:08:53 executing program 1: 16:08:53 executing program 5: 16:08:53 executing program 4: 16:08:53 executing program 3: 16:08:54 executing program 2: 16:08:54 executing program 0: 16:08:54 executing program 5: 16:08:54 executing program 3: 16:08:54 executing program 1: 16:08:54 executing program 4: 16:08:54 executing program 2: 16:08:54 executing program 0: 16:08:54 executing program 3: 16:08:54 executing program 5: 16:08:54 executing program 1: 16:08:54 executing program 4: 16:08:54 executing program 2: 16:08:54 executing program 0: 16:08:54 executing program 1: 16:08:54 executing program 5: 16:08:54 executing program 3: 16:08:54 executing program 2: 16:08:54 executing program 4: 16:08:54 executing program 0: 16:08:54 executing program 5: 16:08:54 executing program 1: 16:08:54 executing program 3: 16:08:54 executing program 2: 16:08:54 executing program 4: 16:08:54 executing program 0: 16:08:54 executing program 5: 16:08:54 executing program 3: 16:08:55 executing program 1: 16:08:55 executing program 2: 16:08:55 executing program 4: 16:08:55 executing program 0: 16:08:55 executing program 3: 16:08:55 executing program 1: 16:08:55 executing program 5: 16:08:55 executing program 2: 16:08:55 executing program 4: 16:08:55 executing program 0: 16:08:55 executing program 1: 16:08:55 executing program 3: 16:08:55 executing program 5: 16:08:55 executing program 2: 16:08:55 executing program 4: 16:08:55 executing program 0: 16:08:55 executing program 5: 16:08:55 executing program 3: 16:08:55 executing program 1: 16:08:55 executing program 2: 16:08:55 executing program 4: 16:08:55 executing program 0: 16:08:55 executing program 3: 16:08:55 executing program 5: 16:08:55 executing program 2: 16:08:56 executing program 1: 16:08:56 executing program 4: 16:08:56 executing program 0: 16:08:56 executing program 5: 16:08:56 executing program 3: 16:08:56 executing program 2: 16:08:56 executing program 1: 16:08:56 executing program 4: 16:08:56 executing program 0: 16:08:56 executing program 5: 16:08:56 executing program 3: 16:08:56 executing program 2: 16:08:56 executing program 0: 16:08:56 executing program 1: 16:08:56 executing program 4: 16:08:56 executing program 3: 16:08:56 executing program 5: 16:08:56 executing program 2: 16:08:56 executing program 4: 16:08:56 executing program 0: 16:08:56 executing program 1: 16:08:56 executing program 3: 16:08:56 executing program 2: 16:08:56 executing program 5: 16:08:56 executing program 0: 16:08:56 executing program 4: 16:08:56 executing program 1: 16:08:57 executing program 3: 16:08:57 executing program 2: 16:08:57 executing program 0: 16:08:57 executing program 5: 16:08:57 executing program 1: 16:08:57 executing program 3: 16:08:57 executing program 4: 16:08:57 executing program 2: 16:08:57 executing program 0: 16:08:57 executing program 1: 16:08:57 executing program 5: 16:08:57 executing program 3: 16:08:57 executing program 2: 16:08:57 executing program 4: 16:08:57 executing program 0: 16:08:57 executing program 1: 16:08:57 executing program 3: 16:08:57 executing program 5: r0 = epoll_create(0x8000) pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)) 16:08:57 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) open$dir(&(0x7f0000006300)='./file0\x00', 0x80000, 0x40) 16:08:57 executing program 4: 16:08:57 executing program 0: 16:08:57 executing program 1: 16:08:57 executing program 3: 16:08:57 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = signalfd(r0, &(0x7f0000001140), 0x8) write$P9_RMKDIR(r1, 0x0, 0x0) 16:08:57 executing program 5: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 16:08:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x891d, 0x0) 16:08:57 executing program 2: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x23ac40, 0x0) fsync(r0) 16:08:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000119c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:08:58 executing program 1: creat(&(0x7f00000010c0)='./file0\x00', 0x0) r0 = geteuid() getresgid(&(0x7f0000001980), &(0x7f0000003d00)=0x0, &(0x7f0000003d40)) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) 16:08:58 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 16:08:58 executing program 5: io_setup(0xffff, &(0x7f0000000000)=0x0) pipe(&(0x7f0000008740)) io_submit(r0, 0x0, 0x0) 16:08:58 executing program 2: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) 16:08:58 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x14) 16:08:58 executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) 16:08:58 executing program 4: semget$private(0x0, 0x1, 0x242) 16:08:58 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) r0 = getegid() chown(&(0x7f0000000080)='./file0\x00', 0xee01, r0) 16:08:58 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x341940, 0xba) 16:08:58 executing program 1: open$dir(&(0x7f0000008180)='./file0\x00', 0x10040, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 16:08:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2040, 0x20) 16:08:59 executing program 3: r0 = semget(0x3, 0x0, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 16:08:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x14) 16:08:59 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x3040, 0x0) 16:08:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x8000) 16:08:59 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200001, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 16:08:59 executing program 4: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) getrandom(&(0x7f0000000040)=""/3, 0xfffffffffffffe7c, 0x0) 16:08:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') read$char_raw(r0, &(0x7f0000007d00)=ANY=[], 0x7a00) 16:08:59 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) 16:08:59 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 16:08:59 executing program 1: memfd_create(&(0x7f0000000040)='/dev/urandom\x00', 0x3) 16:08:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x0, 'cpu'}]}, 0x5) 16:08:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getpgrp(r1) 16:08:59 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0140, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, 0xee01, 0x0) 16:08:59 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x2a) 16:08:59 executing program 5: pipe(&(0x7f0000008740)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 16:08:59 executing program 2: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, 0x0, 0x0) 16:08:59 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x2080, 0x0) 16:09:00 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/173) 16:09:00 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240042, 0x0) 16:09:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x122) 16:09:00 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 16:09:00 executing program 2: ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 16:09:00 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xffffff7f) 16:09:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x3a3202, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 16:09:00 executing program 2: semget$private(0x0, 0x2, 0xc) 16:09:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fadvise64(r0, 0x0, 0x0, 0x2) 16:09:00 executing program 1: 16:09:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x40000001, 0x0) 16:09:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 16:09:00 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0040, 0x10) 16:09:00 executing program 0: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 16:09:00 executing program 2: io_setup(0x0, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) 16:09:00 executing program 4: creat(&(0x7f00000010c0)='./file1\x00', 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x20000, 0x0) 16:09:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') [ 300.477833][ T34] audit: type=1804 audit(1605802140.787:10): pid=10663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir728700711/syzkaller.H0YkoM/65/file1" dev="sda1" ino=15850 res=1 errno=0 16:09:01 executing program 3: pipe2$9p(&(0x7f0000002580), 0x80000) 16:09:01 executing program 1: mknod(&(0x7f0000000800)='./file0\x00', 0x20, 0x0) 16:09:01 executing program 5: mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 16:09:01 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:09:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, 0x0, &(0x7f0000000280)) 16:09:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) 16:09:01 executing program 5: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x10040, 0x0) preadv2(r0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x4) 16:09:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 16:09:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs, 0x6e) 16:09:01 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x14, 0x40000001, 0x0) 16:09:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) 16:09:01 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x84902, 0x0) 16:09:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xa802, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 16:09:01 executing program 1: getgroups(0x1, &(0x7f0000000280)=[0x0]) setresgid(0xee01, r0, 0xffffffffffffffff) 16:09:01 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 16:09:01 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000000)=""/47) 16:09:01 executing program 5: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 16:09:01 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10442, 0x0) 16:09:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000000c0), 0x0, 0x0) 16:09:01 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONCLEX(r0, 0x5450) 16:09:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x101042, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 16:09:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) 16:09:01 executing program 1: r0 = epoll_create(0x9) epoll_pwait(r0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0) 16:09:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000080), 0x12) 16:09:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$sock(r0, 0x0, 0x0, 0x8000) 16:09:01 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6aa3c3, 0x100) 16:09:01 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x14000400) 16:09:01 executing program 2: semget$private(0x0, 0x4, 0x110) 16:09:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x3a3202, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 16:09:02 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0x0) 16:09:02 executing program 0: r0 = eventfd(0xa62) read$eventfd(r0, &(0x7f0000000000), 0x8) 16:09:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') write$cgroup_pid(r0, 0x0, 0x0) 16:09:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe51) 16:09:02 executing program 1: open(&(0x7f0000000000)='.\x00', 0x41, 0x0) 16:09:02 executing program 4: io_setup(0x1ff, &(0x7f0000000000)=0x0) pipe2$9p(&(0x7f0000002580), 0x0) io_submit(r0, 0x0, 0x0) 16:09:02 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0140, 0x0) readlink(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 16:09:02 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0) 16:09:02 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) read(r0, 0x0, 0x0) 16:09:02 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x242000, 0x188) 16:09:02 executing program 1: r0 = inotify_init1(0x0) fstat(r0, &(0x7f0000000080)) 16:09:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') read$eventfd(r0, 0x0, 0x0) 16:09:02 executing program 0: msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) 16:09:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r0, &(0x7f00000001c0)=""/203) 16:09:02 executing program 3: timer_create(0x6, 0x0, &(0x7f00000004c0)) 16:09:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:09:02 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x840, 0x0) 16:09:02 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) 16:09:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 16:09:02 executing program 2: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r0, 0x5422) 16:09:02 executing program 3: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000cd7000/0x4000)=nil, 0x3000) 16:09:02 executing program 5: r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffe1) 16:09:03 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 16:09:03 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80340, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xc2000858) 16:09:03 executing program 2: r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) 16:09:03 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x14d002, 0x0) write$cgroup_type(r0, 0x0, 0xffffffffffffffee) 16:09:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x4080) 16:09:03 executing program 5: open$dir(&(0x7f0000001880)='./file0\x00', 0x1131ac242677e969, 0x10) 16:09:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeac}}], 0x1, 0x0) 16:09:03 executing program 2: r0 = epoll_create(0x3) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000001300)='/dev/urandom\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 16:09:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$P9_ROPEN(r0, 0x0, 0x0) 16:09:03 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x500000, 0x0) 16:09:03 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 16:09:03 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x180) 16:09:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001080), 0x0, 0x0) 16:09:03 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) 16:09:03 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0040, 0x0) 16:09:03 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$char_usb(r0, &(0x7f0000000100)=""/9, 0x9) 16:09:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000400)="98", 0x1, 0x0, 0x0, 0x0) 16:09:03 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa2341, 0x1) 16:09:03 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 16:09:03 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r0, &(0x7f00000001c0), 0x0) 16:09:03 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc43, 0x0) lseek(r0, 0x0, 0x2) 16:09:03 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x444c0, 0x0) sendmsg$unix(r0, 0x0, 0x0) 16:09:03 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002700), &(0x7f0000002740)=0xc) 16:09:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 303.739443][ T34] audit: type=1800 audit(1605802144.047:11): pid=10825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15953 res=0 errno=0 16:09:04 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400642, 0x0) 16:09:04 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 16:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004040), 0x1, 0x0, 0x0) 16:09:04 executing program 3: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 16:09:04 executing program 4: r0 = epoll_create(0x5) pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 16:09:04 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xf) 16:09:04 executing program 5: pipe(&(0x7f0000008740)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 16:09:04 executing program 0: semget$private(0x0, 0x1, 0x50) 16:09:04 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x214000, 0x0) 16:09:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 16:09:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x14d002, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 16:09:04 executing program 5: shmget(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) 16:09:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000000c0)="8c", 0x1, 0x80, &(0x7f0000000000)=@abs, 0x6e) 16:09:04 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240, 0x0) r0 = open(&(0x7f0000008000)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000019000)=""/101) 16:09:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001340), 0x0, 0x20, 0x0) 16:09:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x40) 16:09:05 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x1fd) 16:09:05 executing program 0: r0 = creat(&(0x7f00000010c0)='./file0\x00', 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000040)) 16:09:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r0, 0x0, 0x0) 16:09:05 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x46a202, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 16:09:05 executing program 2: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x1a440, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 16:09:05 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4ca2c1, 0x8a) 16:09:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = signalfd(r0, &(0x7f0000001140), 0x8) write$cgroup_type(r1, 0x0, 0x0) 16:09:05 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xaf08fefd36a99cef, 0x0) 16:09:05 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x46a202, 0x0) write$P9_RVERSION(r0, 0x0, 0x29) 16:09:05 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x98240, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4) 16:09:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 16:09:05 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = signalfd(r0, &(0x7f0000001140), 0x8) write$P9_RLERRORu(r1, 0x0, 0x13) 16:09:05 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x101440, 0x0) 16:09:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x80) 16:09:05 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40802, 0x1a8) 16:09:05 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 16:09:05 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0xffffff7f) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7}, 0x7) 16:09:05 executing program 2: r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3000) [ 305.414067][ T34] audit: type=1400 audit(1605802145.728:12): avc: denied { write } for pid=10900 comm="syz-executor.5" name="task" dev="proc" ino=36560 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 16:09:05 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 16:09:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240, 0x2) [ 305.494745][ T34] audit: type=1400 audit(1605802145.758:13): avc: denied { add_name } for pid=10900 comm="syz-executor.5" name="10901" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 305.579677][ T34] audit: type=1400 audit(1605802145.758:14): avc: denied { create } for pid=10900 comm="syz-executor.5" name="10901" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 305.630441][ T34] audit: type=1804 audit(1605802145.778:15): pid=10902 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir377642281/syzkaller.BUg21h/86/file0" dev="sda1" ino=15740 res=1 errno=0 16:09:06 executing program 2: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x5) 16:09:06 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x20) 16:09:06 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2001, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 16:09:06 executing program 3: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x0) 16:09:06 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0140, 0x0) r0 = getgid() chown(&(0x7f0000000100)='./file0\x00', 0x0, r0) 16:09:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x101801, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 16:09:06 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee01]) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r0) 16:09:06 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r1) 16:09:07 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x129482, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 16:09:07 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x98240, 0x0) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0/file0\x00') 16:09:07 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0xd25be3, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) 16:09:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000140)) 16:09:07 executing program 2: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x1ac40, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) 16:09:07 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0040, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) chown(&(0x7f0000000080)='./file0\x00', r0, 0xee01) 16:09:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 16:09:07 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000100)) 16:09:07 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 16:09:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x480241, 0x0) 16:09:07 executing program 5: open(&(0x7f0000007a00)='./file0\x00', 0x210a40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 16:09:07 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') write$P9_RWSTAT(r0, 0x0, 0x0) 16:09:07 executing program 0: pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) write$P9_RREADDIR(r1, 0x0, 0x0) 16:09:07 executing program 2: r0 = creat(&(0x7f00000010c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x20) 16:09:07 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000600), 0x0, 0x0) 16:09:07 executing program 1: pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x5) 16:09:07 executing program 5: open(&(0x7f0000007a00)='./file0\x00', 0x210a40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 16:09:07 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x143401, 0x0) 16:09:07 executing program 3: io_setup(0x0, &(0x7f0000000340)=0x0) io_destroy(r0) 16:09:07 executing program 1: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7}, 0xfffffffffffffece) 16:09:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r0, 0x0) 16:09:07 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x23) 16:09:07 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) fstatfs(r0, &(0x7f0000000040)=""/8) 16:09:07 executing program 4: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 16:09:07 executing program 3: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x34, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) 16:09:07 executing program 1: r0 = epoll_create(0x3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 16:09:07 executing program 0: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x10040, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x4) 16:09:07 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = signalfd(r0, &(0x7f0000000080), 0x8) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0x9) 16:09:08 executing program 3: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r0, 0x0, 0x0) 16:09:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 16:09:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000000140)) 16:09:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x102042, 0x2) 16:09:08 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80000, 0x0) 16:09:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006b00), 0x0, 0x80) 16:09:08 executing program 2: semget$private(0x0, 0x5, 0x122) 16:09:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 16:09:08 executing program 1: creat(&(0x7f00000010c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 16:09:08 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 16:09:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x2004010, 0x0) 16:09:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') read$char_raw(r0, 0x0, 0x7a00) 16:09:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) 16:09:08 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0xec8d1754872611dd, 0x100) 16:09:08 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 16:09:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) 16:09:08 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/urandom\x00', 0x0) close(r0) 16:09:08 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) fsync(r0) 16:09:08 executing program 2: memfd_create(&(0x7f0000000140)='T-\xa2p\xee\xe0\x14\x8c\xdd\xee\xb6\xa22g\x19\xa0\xadw\xc6e0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 16:09:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') read$char_usb(r0, 0x0, 0x0) 16:09:08 executing program 5: semget$private(0x0, 0x1, 0x1) 16:09:09 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x414061, 0x0) 16:09:09 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb0140, 0x8) 16:09:09 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x6a8c0, 0x0) 16:09:09 executing program 1: getrandom(&(0x7f0000000040)=""/3, 0xfffffffffffffe7c, 0x0) io_setup(0x0, &(0x7f0000000080)) 16:09:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101042, 0x0) write$cgroup_int(r0, 0x0, 0x0) 16:09:09 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x44000, 0x0) 16:09:09 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) 16:09:09 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 16:09:09 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0xffffff9b}, 0xfffffffffffffd3f) 16:09:09 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 16:09:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x4090) 16:09:09 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x341940, 0x0) 16:09:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') write$char_raw(r0, 0x0, 0x3600) 16:09:09 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1893c0, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) close(r0) 16:09:09 executing program 0: r0 = epoll_create(0x4) close(r0) 16:09:10 executing program 1: open(&(0x7f0000007a00)='./file0\x00', 0x210a40, 0x3) 16:09:10 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 16:09:10 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 16:09:10 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = signalfd(r0, &(0x7f0000001140), 0x8) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x13) 16:09:10 executing program 0: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 16:09:10 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8e}, 0x0) 16:09:10 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xe2000432) 16:09:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') write$P9_RWRITE(r0, 0x0, 0x0) 16:09:10 executing program 0: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r0, 0x0) 16:09:10 executing program 3: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 16:09:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_BSZSET(r0, 0x40081271, 0x0) 16:09:10 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x303002, 0x0) 16:09:10 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x98240, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x24000506) 16:09:10 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, 0x0, 0x0) 16:09:10 executing program 3: semget$private(0x0, 0x2, 0x381) 16:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 16:09:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = getgid() lchown(&(0x7f0000000040)='./file0\x00', 0xee01, r0) 16:09:10 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x88801, 0x0) 16:09:10 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) signalfd(r0, &(0x7f00000000c0), 0x8) 16:09:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa0642, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 16:09:11 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 16:09:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x250840, 0x0) 16:09:11 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x940, 0x0) 16:09:11 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$P9_RCREATE(r0, 0x0, 0x0) 16:09:11 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 16:09:11 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x143040, 0x0) 16:09:11 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0xfa) 16:09:11 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4b0140, 0x56) 16:09:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x40000001, &(0x7f0000000240)) 16:09:11 executing program 2: semget$private(0x0, 0x2, 0x26) 16:09:11 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 16:09:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') write$cgroup_devices(r0, 0x0, 0xd7130f0b8cf00c69) 16:09:11 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb0140, 0x0) 16:09:11 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000005f80)=@file={0x1, './file0\x00'}, 0x6e) 16:09:11 executing program 4: r0 = epoll_create(0x9) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:09:11 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x0) 16:09:11 executing program 0: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 16:09:11 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80340, 0x0) close(r0) 16:09:11 executing program 5: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCREATE(r0, 0x0, 0x2b) 16:09:11 executing program 3: semget$private(0x0, 0x1, 0x420) 16:09:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 16:09:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') write$cgroup_type(r0, 0x0, 0x0) 16:09:11 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setown(r0, 0x8, r1) 16:09:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 16:09:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, 0x0, 0x13) 16:09:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 16:09:11 executing program 3: creat(&(0x7f00000010c0)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x4) 16:09:12 executing program 0: shmget(0x1, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) 16:09:12 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/186) 16:09:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)) 16:09:12 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x98240, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x44000115) 16:09:12 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40440, 0x0) 16:09:12 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)) 16:09:12 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) 16:09:12 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f00000014c0)='./file0\x00', 0x800, 0x0) 16:09:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) 16:09:12 executing program 0: r0 = open$dir(&(0x7f0000008180)='./file0\x00', 0x10040, 0x0) preadv2(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4) [ 312.141131][ T34] audit: type=1804 audit(1605802152.458:16): pid=11234 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir060287720/syzkaller.tcMuD1/105/file0" dev="sda1" ino=15820 res=1 errno=0 16:09:12 executing program 4: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xa0040, 0x0) close(r0) 16:09:12 executing program 2: pipe(&(0x7f0000008740)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) 16:09:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000008000)='./file0\x00', 0x101200, 0x0) 16:09:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x88) 16:09:12 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 16:09:12 executing program 0: getrandom(&(0x7f0000000000)=""/75, 0x4b, 0x1) 16:09:13 executing program 0: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 16:09:13 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x430040, 0x20) 16:09:13 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) write$P9_RRENAMEAT(r0, 0x0, 0x0) 16:09:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') write$P9_RSTAT(r0, 0x0, 0x0) 16:09:13 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r1 = signalfd(r0, &(0x7f0000001140), 0x8) write$P9_RGETATTR(r1, 0x0, 0x0) 16:09:13 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x39b242, 0x100) 16:09:13 executing program 2: pipe2$9p(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0xd7c70c4819d5d407) 16:09:13 executing program 5: creat(&(0x7f00000010c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2500, 0x0) 16:09:13 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) write$P9_RSTATu(r0, 0x0, 0x0) 16:09:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 16:09:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) syncfs(r0) 16:09:13 executing program 2: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) [ 313.154395][ T34] audit: type=1804 audit(1605802153.468:17): pid=11276 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir060287720/syzkaller.tcMuD1/108/file0" dev="sda1" ino=16016 res=1 errno=0 16:09:14 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x62a441, 0x140) 16:09:14 executing program 5: shmget(0x0, 0xc00000, 0x0, &(0x7f00003fe000/0xc00000)=nil) 16:09:14 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x98240, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x4000000) 16:09:14 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) close(r0) 16:09:14 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x2100, 0x0) 16:09:14 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) 16:09:14 executing program 5: 16:09:14 executing program 4: 16:09:14 executing program 1: 16:09:14 executing program 2: 16:09:14 executing program 3: 16:09:14 executing program 0: 16:09:14 executing program 1: 16:09:14 executing program 5: 16:09:14 executing program 0: 16:09:14 executing program 3: 16:09:14 executing program 4: 16:09:14 executing program 2: 16:09:14 executing program 1: 16:09:14 executing program 5: 16:09:14 executing program 0: 16:09:14 executing program 4: 16:09:14 executing program 2: 16:09:14 executing program 3: 16:09:14 executing program 1: 16:09:14 executing program 2: 16:09:14 executing program 5: 16:09:14 executing program 3: 16:09:14 executing program 4: 16:09:14 executing program 0: 16:09:14 executing program 1: 16:09:15 executing program 4: 16:09:15 executing program 5: 16:09:15 executing program 0: 16:09:15 executing program 3: 16:09:15 executing program 2: 16:09:15 executing program 1: 16:09:15 executing program 4: 16:09:15 executing program 5: 16:09:15 executing program 0: 16:09:15 executing program 3: 16:09:15 executing program 1: 16:09:15 executing program 2: 16:09:15 executing program 4: 16:09:15 executing program 5: 16:09:15 executing program 0: 16:09:15 executing program 3: 16:09:15 executing program 1: 16:09:15 executing program 2: 16:09:15 executing program 5: 16:09:15 executing program 4: 16:09:15 executing program 0: 16:09:15 executing program 3: 16:09:15 executing program 1: 16:09:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r0, 0x0, 0x0) 16:09:15 executing program 5: 16:09:15 executing program 4: 16:09:15 executing program 0: 16:09:15 executing program 3: 16:09:15 executing program 1: 16:09:15 executing program 2: 16:09:16 executing program 5: 16:09:16 executing program 4: 16:09:16 executing program 0: 16:09:16 executing program 3: 16:09:16 executing program 1: 16:09:16 executing program 2: 16:09:16 executing program 5: 16:09:16 executing program 4: 16:09:16 executing program 0: 16:09:16 executing program 3: 16:09:16 executing program 1: 16:09:16 executing program 2: 16:09:16 executing program 4: 16:09:16 executing program 5: 16:09:16 executing program 0: 16:09:16 executing program 3: 16:09:16 executing program 1: 16:09:16 executing program 2: 16:09:16 executing program 4: 16:09:16 executing program 0: 16:09:16 executing program 5: 16:09:16 executing program 3: 16:09:16 executing program 1: 16:09:16 executing program 2: 16:09:16 executing program 4: 16:09:16 executing program 0: 16:09:16 executing program 3: 16:09:16 executing program 5: 16:09:16 executing program 2: 16:09:16 executing program 1: 16:09:17 executing program 4: 16:09:17 executing program 0: 16:09:17 executing program 3: 16:09:17 executing program 2: 16:09:17 executing program 5: 16:09:17 executing program 1: 16:09:17 executing program 4: 16:09:17 executing program 0: 16:09:17 executing program 2: 16:09:17 executing program 5: 16:09:17 executing program 4: 16:09:17 executing program 1: 16:09:17 executing program 3: 16:09:17 executing program 5: 16:09:17 executing program 0: 16:09:17 executing program 2: 16:09:17 executing program 4: 16:09:17 executing program 3: 16:09:17 executing program 1: 16:09:17 executing program 2: 16:09:17 executing program 5: 16:09:17 executing program 0: 16:09:17 executing program 3: 16:09:17 executing program 4: 16:09:17 executing program 1: 16:09:17 executing program 2: 16:09:17 executing program 5: 16:09:17 executing program 0: 16:09:17 executing program 3: 16:09:17 executing program 4: 16:09:18 executing program 1: 16:09:18 executing program 5: 16:09:18 executing program 0: 16:09:18 executing program 2: 16:09:18 executing program 4: 16:09:18 executing program 3: 16:09:18 executing program 1: 16:09:18 executing program 5: 16:09:18 executing program 4: 16:09:18 executing program 2: 16:09:18 executing program 0: 16:09:18 executing program 1: 16:09:18 executing program 3: 16:09:18 executing program 5: 16:09:18 executing program 0: 16:09:18 executing program 4: 16:09:18 executing program 2: 16:09:18 executing program 5: 16:09:18 executing program 1: 16:09:18 executing program 3: 16:09:18 executing program 0: 16:09:18 executing program 4: 16:09:18 executing program 2: 16:09:18 executing program 5: 16:09:18 executing program 1: 16:09:18 executing program 3: 16:09:18 executing program 0: 16:09:18 executing program 2: 16:09:19 executing program 4: 16:09:19 executing program 1: 16:09:19 executing program 5: 16:09:19 executing program 3: 16:09:19 executing program 0: 16:09:19 executing program 2: 16:09:19 executing program 4: 16:09:19 executing program 5: 16:09:19 executing program 3: 16:09:19 executing program 1: 16:09:19 executing program 2: 16:09:19 executing program 4: 16:09:19 executing program 0: 16:09:19 executing program 5: 16:09:19 executing program 3: 16:09:19 executing program 1: 16:09:19 executing program 2: 16:09:19 executing program 4: 16:09:19 executing program 0: 16:09:19 executing program 5: 16:09:19 executing program 3: 16:09:19 executing program 1: 16:09:19 executing program 5: 16:09:19 executing program 4: 16:09:19 executing program 2: 16:09:19 executing program 0: 16:09:19 executing program 3: 16:09:19 executing program 1: 16:09:19 executing program 5: 16:09:19 executing program 0: 16:09:20 executing program 2: 16:09:20 executing program 4: 16:09:20 executing program 3: 16:09:20 executing program 1: 16:09:20 executing program 5: 16:09:20 executing program 2: 16:09:20 executing program 0: 16:09:20 executing program 4: 16:09:20 executing program 3: 16:09:20 executing program 1: 16:09:20 executing program 5: 16:09:20 executing program 2: 16:09:20 executing program 0: 16:09:20 executing program 4: 16:09:20 executing program 1: 16:09:20 executing program 3: 16:09:20 executing program 2: 16:09:20 executing program 5: 16:09:20 executing program 0: 16:09:20 executing program 4: 16:09:20 executing program 1: 16:09:20 executing program 3: 16:09:20 executing program 2: 16:09:20 executing program 5: 16:09:20 executing program 0: 16:09:20 executing program 3: 16:09:20 executing program 1: 16:09:20 executing program 4: 16:09:20 executing program 2: 16:09:20 executing program 5: 16:09:21 executing program 0: 16:09:21 executing program 1: 16:09:21 executing program 3: 16:09:21 executing program 2: 16:09:21 executing program 0: 16:09:21 executing program 4: 16:09:21 executing program 5: 16:09:21 executing program 1: 16:09:21 executing program 3: 16:09:21 executing program 2: 16:09:21 executing program 5: 16:09:21 executing program 0: 16:09:21 executing program 4: 16:09:21 executing program 1: 16:09:21 executing program 3: 16:09:21 executing program 2: 16:09:21 executing program 5: 16:09:21 executing program 0: 16:09:21 executing program 4: 16:09:21 executing program 1: 16:09:21 executing program 2: 16:09:21 executing program 3: 16:09:21 executing program 5: 16:09:21 executing program 0: 16:09:21 executing program 4: 16:09:21 executing program 1: 16:09:21 executing program 2: 16:09:21 executing program 3: 16:09:21 executing program 5: 16:09:22 executing program 1: 16:09:22 executing program 4: 16:09:22 executing program 0: 16:09:22 executing program 2: 16:09:22 executing program 5: 16:09:22 executing program 3: 16:09:22 executing program 1: 16:09:22 executing program 4: 16:09:22 executing program 0: 16:09:22 executing program 2: 16:09:22 executing program 5: 16:09:22 executing program 3: 16:09:22 executing program 1: 16:09:22 executing program 4: 16:09:22 executing program 0: 16:09:22 executing program 2: 16:09:22 executing program 5: 16:09:22 executing program 3: 16:09:22 executing program 1: 16:09:22 executing program 4: 16:09:22 executing program 0: 16:09:22 executing program 2: 16:09:22 executing program 5: 16:09:22 executing program 1: 16:09:22 executing program 3: 16:09:22 executing program 4: 16:09:22 executing program 2: 16:09:22 executing program 0: 16:09:22 executing program 5: 16:09:23 executing program 1: 16:09:23 executing program 3: 16:09:23 executing program 2: 16:09:23 executing program 0: 16:09:23 executing program 4: 16:09:23 executing program 5: 16:09:23 executing program 3: 16:09:23 executing program 1: 16:09:23 executing program 2: 16:09:23 executing program 0: 16:09:23 executing program 4: 16:09:23 executing program 3: 16:09:23 executing program 5: 16:09:23 executing program 1: 16:09:23 executing program 2: 16:09:23 executing program 4: 16:09:23 executing program 0: 16:09:23 executing program 5: 16:09:23 executing program 3: 16:09:23 executing program 1: 16:09:23 executing program 2: 16:09:23 executing program 0: 16:09:23 executing program 4: 16:09:23 executing program 1: 16:09:23 executing program 3: 16:09:23 executing program 5: 16:09:23 executing program 2: 16:09:23 executing program 0: 16:09:24 executing program 3: 16:09:24 executing program 1: 16:09:24 executing program 4: 16:09:24 executing program 5: 16:09:24 executing program 2: 16:09:24 executing program 0: 16:09:24 executing program 3: 16:09:24 executing program 2: 16:09:24 executing program 1: 16:09:24 executing program 5: 16:09:24 executing program 4: 16:09:24 executing program 0: 16:09:24 executing program 3: 16:09:24 executing program 2: 16:09:24 executing program 1: 16:09:24 executing program 4: 16:09:24 executing program 5: 16:09:24 executing program 3: 16:09:24 executing program 0: 16:09:24 executing program 1: 16:09:24 executing program 2: 16:09:24 executing program 4: 16:09:24 executing program 5: 16:09:24 executing program 3: 16:09:24 executing program 0: 16:09:24 executing program 1: 16:09:24 executing program 2: 16:09:24 executing program 4: 16:09:24 executing program 5: 16:09:25 executing program 3: 16:09:25 executing program 0: 16:09:25 executing program 1: 16:09:25 executing program 2: 16:09:25 executing program 4: 16:09:25 executing program 5: 16:09:25 executing program 3: 16:09:25 executing program 0: 16:09:25 executing program 1: 16:09:25 executing program 2: 16:09:25 executing program 4: 16:09:25 executing program 3: 16:09:25 executing program 1: 16:09:25 executing program 5: 16:09:25 executing program 0: 16:09:25 executing program 4: 16:09:25 executing program 2: 16:09:25 executing program 3: 16:09:25 executing program 1: 16:09:25 executing program 5: 16:09:25 executing program 4: 16:09:25 executing program 0: 16:09:25 executing program 2: 16:09:25 executing program 5: 16:09:25 executing program 3: 16:09:25 executing program 1: 16:09:25 executing program 4: 16:09:25 executing program 0: 16:09:25 executing program 2: 16:09:25 executing program 5: 16:09:26 executing program 3: 16:09:26 executing program 1: 16:09:26 executing program 4: 16:09:26 executing program 0: 16:09:26 executing program 5: 16:09:26 executing program 2: 16:09:26 executing program 3: 16:09:26 executing program 1: 16:09:26 executing program 4: 16:09:26 executing program 0: 16:09:26 executing program 5: 16:09:26 executing program 2: 16:09:26 executing program 3: 16:09:26 executing program 1: 16:09:26 executing program 4: 16:09:26 executing program 0: 16:09:26 executing program 5: 16:09:26 executing program 2: 16:09:26 executing program 3: 16:09:26 executing program 4: 16:09:26 executing program 1: 16:09:26 executing program 0: 16:09:26 executing program 5: 16:09:26 executing program 2: 16:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) 16:09:26 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 16:09:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r0 = socket(0xa, 0x0, 0x0) bind$isdn_base(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 16:09:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x152000}], 0x0, &(0x7f0000000080)={[{@shortname_winnt='shortname=winnt'}]}) 16:09:27 executing program 5: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="000440000100010024000000001c08108f13", 0x12, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf9e0000000e6c2645f5303240000000000000000000000000000000000ed41000080000000e6c2645f0002250000000000000000000000000000000000ed8100001a040000e6c2645f0001260027000000000000000000000000000000ffa1000026000000e6c2645f0001280000000000000000000000000000000000ed8100000a000000e6c2645f0001290000000000000000000000000000000000ed81000028230000e6c2645f0002", 0x82e, 0x880}, {&(0x7f0000010b00)="01002e000000000000000000000000000000000000000000000000000000000001002e2e00000000000000000000000000000000000000000000000000000000020066696c653000000000000000000000000000000000000000000000000000050066696c653100000000000000000000000000000000000000000000000000060066696c6532", 0x87, 0x9000}], 0x0, &(0x7f0000011600)=ANY=[]) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240130, &(0x7f0000001ec0)=ANY=[]) unlinkat(r0, &(0x7f0000000480)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000500)='./file2\x00', r0, &(0x7f00000017c0)='./file1\x00') 16:09:27 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000740)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 16:09:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) [ 326.824701][T11725] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 16:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) 16:09:27 executing program 0: r0 = fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 327.045238][T11731] MINIX-fs: mounting unchecked file system, running fsck is recommended 16:09:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 16:09:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) 16:09:27 executing program 5: socket$inet(0x2, 0x0, 0xffffff7f) 16:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1b7) 16:09:27 executing program 4: r0 = syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f336c56d010000000c0024000000000000000000e80300000000000000000000020000000000000000000000e2b40a7e6a21434794c3ee542307f1d5", 0x40, 0x400}, {&(0x7f0000010100)="05000000c04100007400000000000000ffffffff000000005cf90000535f0000e8030000000000000000000001000000000000000000000000000000000000002400000000000000540002002400000000000000550002002a00000000000000570001003000000000000000600002005b00000000000000650001005f000000000000006a0001005f000000000000006f0001002e2e2e66696c652e636f6c6466696c653066696c653166696c653266696c653300000000000000000000000005000000ed8100006400000000000000ffffffff010000005cf90000535f0000e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730000000000000000000000000000000000000000000000000000000005000000ed4100003d00000000000000ffffffff020000005cf90000535f0000e8030000000000000000000001000000000000000000000000000000000000003000000000000000300002002400000000000000310002003400000000000000330001005700000000000000380007002e2e2e66696c653066696c653100000005000000ed8100001a04000000000000ffffffff030000005cf90000535f0000e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c00000000000005000000ffa100002600000000000000ffffffff040000005cf90000535f0000e8030000000000000000000001000000000000000000000000000000000000002f746d702f73797a2d696d61676567656e3233373235313139322f66696c65302f66696c6530000000000000000000000000000000000000000000000000000005000900ed8100000a00000000000000ffffffff050000005cf90000535f0000e803000000000000000000000100000000000000000000000000000000000000000000000000000000000000060106007861747472317861747472310601060078617474723278617474723273797a6b616c6c6572730000000000000000000003000000ed810000282300000000000001000000060000005cf90000535f0000e803000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000100000001000000020000000100010000002803", 0x7c4, 0x480}, {&(0x7f0000010900), 0x0, 0x1000}], 0x0, &(0x7f0000010a00)) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)) [ 327.797825][T11765] erofs: (device loop4): mounted with root inode @ nid 36. 16:09:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x20000de, 0x2, 0x26832, 0xffffffffffffffff, 0x8000000) r0 = socket(0xa, 0x0, 0x0) bind$isdn_base(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 16:09:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 16:09:28 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x840, 0x12b001) write$midi(r0, &(0x7f0000000380)="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", 0xfffffdef) 16:09:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 16:09:28 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 16:09:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000c40)='/dev/snd/controlC#\x00', 0x0, 0x200) 16:09:28 executing program 0: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r0, &(0x7f0000000000)="0121213998aaf039d62cf3501a475652195686000000000000000000feffffff", 0x20) 16:09:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x0, 0x20100) 16:09:28 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @rand_addr=0x64010102}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) [ 328.524398][ T8] ------------[ cut here ]------------ [ 328.530098][ T8] refcount_t: addition on 0; use-after-free. [ 328.536473][ T8] WARNING: CPU: 0 PID: 8 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 [ 328.545942][ T8] Modules linked in: [ 328.549847][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.10.0-rc4-syzkaller #0 [ 328.558078][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.568237][ T8] Workqueue: qrtr_ns_handler qrtr_ns_worker [ 328.574173][ T8] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 328.580333][ T8] Code: 09 31 ff 89 de e8 d7 f4 b8 fd 84 db 0f 85 36 ff ff ff e8 ba fc b8 fd 48 c7 c7 00 f7 9c 89 c6 05 31 97 21 09 01 e8 91 ee f5 04 <0f> 0b e9 17 ff ff ff e8 9b fc b8 fd 0f b6 1d 16 97 21 09 31 ff 89 [ 328.599944][ T8] RSP: 0018:ffffc90000cef9f8 EFLAGS: 00010086 [ 328.606019][ T8] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 328.613991][ T8] RDX: ffff888010e9a200 RSI: ffffffff8158f3e5 RDI: fffff5200019df31 [ 328.621955][ T8] RBP: 0000000000000002 R08: 0000000000000001 R09: ffff8880b9e2011b [ 328.629938][ T8] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888011317640 [ 328.637898][ T8] R13: ffff88801dd96800 R14: ffff88801512dc30 R15: ffff88801512dc34 [ 328.645861][ T8] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 328.654790][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.661369][ T8] CR2: 0000000020800000 CR3: 000000003487b000 CR4: 00000000001506f0 [ 328.669443][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.682636][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.690606][ T8] Call Trace: [ 328.694006][ T8] qrtr_recvmsg+0x845/0x970 [ 328.698511][ T8] ? qrtr_node_enqueue+0x1250/0x1250 [ 328.703893][ T8] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 328.709217][ T8] ? security_socket_recvmsg+0x8f/0xc0 [ 328.714672][ T8] ? qrtr_node_enqueue+0x1250/0x1250 [ 328.720037][ T8] kernel_recvmsg+0x110/0x160 [ 328.724714][ T8] qrtr_ns_worker+0x15a/0x1740 [ 328.729572][ T8] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 328.735550][ T8] ? ctrl_cmd_bye+0xc20/0xc20 [ 328.740293][ T8] process_one_work+0x933/0x15a0 [ 328.745228][ T8] ? lock_release+0x710/0x710 [ 328.749894][ T8] ? pwq_dec_nr_in_flight+0x320/0x320 [ 328.755305][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 328.760290][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 328.765329][ T8] worker_thread+0x64c/0x1120 [ 328.770011][ T8] ? process_one_work+0x15a0/0x15a0 [ 328.775211][ T8] kthread+0x3af/0x4a0 [ 328.779270][ T8] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 328.785182][ T8] ret_from_fork+0x1f/0x30 [ 328.789594][ T8] Kernel panic - not syncing: panic_on_warn set ... [ 328.797671][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.10.0-rc4-syzkaller #0 [ 328.805903][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.815973][ T8] Workqueue: qrtr_ns_handler qrtr_ns_worker [ 328.821866][ T8] Call Trace: [ 328.825171][ T8] dump_stack+0x107/0x163 [ 328.829512][ T8] panic+0x306/0x73d [ 328.833394][ T8] ? __warn_printk+0xf3/0xf3 [ 328.837971][ T8] ? __warn.cold+0x1a/0x44 [ 328.842438][ T8] ? __warn+0xf1/0x210 [ 328.846497][ T8] ? refcount_warn_saturate+0x169/0x1e0 [ 328.852043][ T8] __warn.cold+0x35/0x44 [ 328.856386][ T8] ? wake_up_klogd.part.0+0x8e/0xd0 [ 328.861684][ T8] ? refcount_warn_saturate+0x169/0x1e0 [ 328.867283][ T8] report_bug+0x1bd/0x210 [ 328.871645][ T8] handle_bug+0x3c/0x60 [ 328.875793][ T8] exc_invalid_op+0x14/0x40 [ 328.880341][ T8] asm_exc_invalid_op+0x12/0x20 [ 328.885183][ T8] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 328.891333][ T8] Code: 09 31 ff 89 de e8 d7 f4 b8 fd 84 db 0f 85 36 ff ff ff e8 ba fc b8 fd 48 c7 c7 00 f7 9c 89 c6 05 31 97 21 09 01 e8 91 ee f5 04 <0f> 0b e9 17 ff ff ff e8 9b fc b8 fd 0f b6 1d 16 97 21 09 31 ff 89 [ 328.910939][ T8] RSP: 0018:ffffc90000cef9f8 EFLAGS: 00010086 [ 328.916998][ T8] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 328.924979][ T8] RDX: ffff888010e9a200 RSI: ffffffff8158f3e5 RDI: fffff5200019df31 [ 328.932940][ T8] RBP: 0000000000000002 R08: 0000000000000001 R09: ffff8880b9e2011b [ 328.940911][ T8] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888011317640 [ 328.948886][ T8] R13: ffff88801dd96800 R14: ffff88801512dc30 R15: ffff88801512dc34 [ 328.956871][ T8] ? vprintk_func+0x95/0x1e0 [ 328.961454][ T8] ? refcount_warn_saturate+0x169/0x1e0 [ 328.966982][ T8] qrtr_recvmsg+0x845/0x970 [ 328.971657][ T8] ? qrtr_node_enqueue+0x1250/0x1250 [ 328.976934][ T8] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 328.982214][ T8] ? security_socket_recvmsg+0x8f/0xc0 [ 328.987659][ T8] ? qrtr_node_enqueue+0x1250/0x1250 [ 328.992959][ T8] kernel_recvmsg+0x110/0x160 [ 328.997636][ T8] qrtr_ns_worker+0x15a/0x1740 [ 329.002397][ T8] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 329.008383][ T8] ? ctrl_cmd_bye+0xc20/0xc20 [ 329.013082][ T8] process_one_work+0x933/0x15a0 [ 329.018025][ T8] ? lock_release+0x710/0x710 [ 329.022699][ T8] ? pwq_dec_nr_in_flight+0x320/0x320 [ 329.028062][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 329.033001][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 329.038017][ T8] worker_thread+0x64c/0x1120 [ 329.042687][ T8] ? process_one_work+0x15a0/0x15a0 [ 329.047874][ T8] kthread+0x3af/0x4a0 [ 329.051946][ T8] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 329.057830][ T8] ret_from_fork+0x1f/0x30 [ 330.128716][ T8] Shutting down cpus with NMI [ 330.133916][ T8] Kernel Offset: disabled [ 330.138382][ T8] Rebooting in 86400 seconds..