Warning: Permanently added '10.128.1.40' (ECDSA) to the list of known hosts. 2020/10/11 08:25:41 fuzzer started 2020/10/11 08:25:41 dialing manager at 10.128.0.105:44721 2020/10/11 08:25:41 syscalls: 3308 2020/10/11 08:25:41 code coverage: enabled 2020/10/11 08:25:41 comparison tracing: enabled 2020/10/11 08:25:41 extra coverage: extra coverage is not supported by the kernel 2020/10/11 08:25:41 setuid sandbox: enabled 2020/10/11 08:25:41 namespace sandbox: enabled 2020/10/11 08:25:41 Android sandbox: enabled 2020/10/11 08:25:41 fault injection: enabled 2020/10/11 08:25:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/11 08:25:41 net packet injection: enabled 2020/10/11 08:25:41 net device setup: enabled 2020/10/11 08:25:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/11 08:25:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/11 08:25:41 USB emulation: /dev/raw-gadget does not exist 2020/10/11 08:25:41 hci packet injection: enabled 2020/10/11 08:25:41 wifi device emulation: enabled 08:27:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) syzkaller login: [ 145.670352] audit: type=1400 audit(1602404846.806:8): avc: denied { execmem } for pid=6492 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:27:27 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') 08:27:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9", 0x1}], 0x1) 08:27:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0x39, 0x0) 08:27:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e40)={&(0x7f0000000480), 0xc, 0x0}, 0x0) 08:27:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x48802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e17", 0x11}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x1) write$tun(r0, &(0x7f0000003dc0)=ANY=[], 0x413) [ 146.876718] IPVS: ftp: loaded support on port[0] = 21 [ 146.992798] chnl_net:caif_netlink_parms(): no params data found [ 147.075870] IPVS: ftp: loaded support on port[0] = 21 [ 147.167073] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.175562] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.190777] device bridge_slave_0 entered promiscuous mode [ 147.213142] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.223441] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.237718] device bridge_slave_1 entered promiscuous mode [ 147.305521] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.307830] IPVS: ftp: loaded support on port[0] = 21 [ 147.330731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.448510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.463941] team0: Port device team_slave_0 added [ 147.485627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.493832] team0: Port device team_slave_1 added [ 147.525714] IPVS: ftp: loaded support on port[0] = 21 [ 147.533539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.543471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.588173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.618428] chnl_net:caif_netlink_parms(): no params data found [ 147.643586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.655640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.732606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.748669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.775396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.797018] IPVS: ftp: loaded support on port[0] = 21 [ 147.803545] IPVS: ftp: loaded support on port[0] = 21 [ 147.863587] device hsr_slave_0 entered promiscuous mode [ 147.870359] device hsr_slave_1 entered promiscuous mode [ 147.924713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.935891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 148.052003] chnl_net:caif_netlink_parms(): no params data found [ 148.168932] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.178269] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.186729] device bridge_slave_0 entered promiscuous mode [ 148.197053] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.203991] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.212784] device bridge_slave_1 entered promiscuous mode [ 148.314501] chnl_net:caif_netlink_parms(): no params data found [ 148.338338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.360808] chnl_net:caif_netlink_parms(): no params data found [ 148.384128] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.483498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 148.495132] team0: Port device team_slave_0 added [ 148.557206] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 148.568970] team0: Port device team_slave_1 added [ 148.599725] chnl_net:caif_netlink_parms(): no params data found [ 148.638754] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.647814] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.663093] device bridge_slave_0 entered promiscuous mode [ 148.675428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.690873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.729608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.750327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.760168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.791339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.809274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.821472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.829716] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.837201] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.847877] device bridge_slave_1 entered promiscuous mode [ 148.870106] Bluetooth: hci0: command 0x0409 tx timeout [ 148.888918] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.898458] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.907787] device bridge_slave_0 entered promiscuous mode [ 148.940208] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.956450] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.963996] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.975290] device bridge_slave_1 entered promiscuous mode [ 148.999939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.014096] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.022850] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.031810] device bridge_slave_0 entered promiscuous mode [ 149.048532] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.056110] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.065786] device bridge_slave_1 entered promiscuous mode [ 149.078853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.098574] device hsr_slave_0 entered promiscuous mode [ 149.107109] device hsr_slave_1 entered promiscuous mode [ 149.120060] Bluetooth: hci1: command 0x0409 tx timeout [ 149.121622] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 149.168234] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.194981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.211433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.222272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.233946] team0: Port device team_slave_0 added [ 149.254647] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.276859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.287299] Bluetooth: hci2: command 0x0409 tx timeout [ 149.297389] team0: Port device team_slave_1 added [ 149.305606] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.315332] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.322530] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.331863] device bridge_slave_0 entered promiscuous mode [ 149.345856] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.354129] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.362861] device bridge_slave_1 entered promiscuous mode [ 149.404532] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.413735] team0: Port device team_slave_0 added [ 149.422679] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.430700] Bluetooth: hci3: command 0x0409 tx timeout [ 149.433462] team0: Port device team_slave_1 added [ 149.459257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.465870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.495529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.514148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.522989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.553692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.586347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.595531] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.604364] team0: Port device team_slave_0 added [ 149.612054] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.621773] team0: Port device team_slave_1 added [ 149.627874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.640067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.646632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.676842] Bluetooth: hci4: command 0x0409 tx timeout [ 149.682611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.698651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.705614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.734766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.746979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.756753] Bluetooth: hci5: command 0x0409 tx timeout [ 149.781257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.796411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.814939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.841076] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.851580] team0: Port device team_slave_0 added [ 149.893465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.901265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.936606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.949291] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.958240] team0: Port device team_slave_1 added [ 149.979318] device hsr_slave_0 entered promiscuous mode [ 149.985588] device hsr_slave_1 entered promiscuous mode [ 149.997959] device hsr_slave_0 entered promiscuous mode [ 150.004809] device hsr_slave_1 entered promiscuous mode [ 150.013316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.020574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.048139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.074412] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.082742] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.092034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.105613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.114851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.138217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.168652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.176006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.182675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.208646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.230589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.236864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.263330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.278211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.296708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.304874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.326566] device hsr_slave_0 entered promiscuous mode [ 150.332946] device hsr_slave_1 entered promiscuous mode [ 150.339586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.348478] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.388242] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.402489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.411522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.427357] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.450025] device hsr_slave_0 entered promiscuous mode [ 150.456352] device hsr_slave_1 entered promiscuous mode [ 150.464332] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.475238] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.482733] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.521159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.557500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.594698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.604203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.614741] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.622636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.635829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.671941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.682083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.693808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.703437] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.710164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.724871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.759819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.777552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.826957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.844269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.876073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.885317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.896280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.926549] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.937629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.946728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.949454] Bluetooth: hci0: command 0x041b tx timeout [ 150.956482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.974308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 150.984657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.002043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.012674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.025670] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.036219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.054525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.061607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.074470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.092457] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.100837] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.107298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.141596] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.166464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.175705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.185889] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.190248] Bluetooth: hci1: command 0x041b tx timeout [ 151.193226] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.210001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.218548] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 151.231477] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.239985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.247956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.257503] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.264233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.272663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.279568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.294161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.307291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.314909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.323728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.332516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.341361] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.348004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.349138] Bluetooth: hci2: command 0x041b tx timeout [ 151.382556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.396387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.408249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.427091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.437169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.451752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.466052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.482186] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.495024] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 151.504256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.509098] Bluetooth: hci3: command 0x041b tx timeout [ 151.520144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.528477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.536763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.544202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.561416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.572389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.578541] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.589889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.600223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.607384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.617285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.633797] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 151.643331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.654094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.663885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.674046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.684204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.693035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.705194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.717707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.726910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.736537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.745656] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.752221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.760806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.768324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.779026] Bluetooth: hci4: command 0x041b tx timeout [ 151.784627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.793273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.802108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.816003] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.823743] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.831355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.839582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.850586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.860597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.869986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.877869] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.884761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.895357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.901814] Bluetooth: hci5: command 0x041b tx timeout [ 151.917288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.926886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.937706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.948508] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.960482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.970923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.981371] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.988726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.996716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.005185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.013571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.020867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.030583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.040965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.051354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.060803] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.067083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.090734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.100280] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.106378] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.118659] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 152.126834] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 152.134272] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 152.140883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.148756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.157060] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.163925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.171521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.180168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.192114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.204752] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 152.213891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.224499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.233213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.244450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.253759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.263233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.271519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.279722] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.286227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.293497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.302787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.312302] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 152.321765] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 152.333414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.345497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.355811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.366690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.374927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.382680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.390188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.398173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.406369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.419941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 152.427174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.434450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.444372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.453520] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 152.465575] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.472436] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.482342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.490079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.498711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.508791] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.515617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.525620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.533690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.541776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.554243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.562527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.570921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.581866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.593111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.602394] device veth0_vlan entered promiscuous mode [ 152.614406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.627536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.636539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.648749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.659459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.669963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.683436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.693904] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.702373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.711744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.721187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.740699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.764137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.785199] device veth1_vlan entered promiscuous mode [ 152.794526] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 152.805180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.812836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.823755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.833460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.844671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.856978] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 152.864964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.875278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.884276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.893627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.902037] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.908552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.919666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.928570] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 152.940885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.952376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.964183] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.971631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.972389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.990669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.998418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.007891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.016540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.025398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.033798] Bluetooth: hci0: command 0x040f tx timeout [ 153.035959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.048798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.060351] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 153.070954] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.077233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.093117] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 153.101226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.115655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.124214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.133997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.142942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.154603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.164569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.182098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.194053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.204793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.213850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.224081] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 153.235335] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 153.243742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.251377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.258486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.267801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.268939] Bluetooth: hci1: command 0x040f tx timeout [ 153.277528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.288766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.305121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.314716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.326776] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.334251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.345497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.363161] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 153.370633] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 153.377395] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 153.386304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.397637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.406473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.416146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.425181] device veth0_macvtap entered promiscuous mode [ 153.430172] Bluetooth: hci2: command 0x040f tx timeout [ 153.434942] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.447978] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 153.461174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.467981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.474927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.488051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.501517] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.513673] device veth1_macvtap entered promiscuous mode [ 153.522997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.531044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.539046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.546162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.560855] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 153.571399] device veth0_vlan entered promiscuous mode [ 153.584414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 153.594085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.599072] Bluetooth: hci3: command 0x040f tx timeout [ 153.601537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.615980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.624879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.635817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.643582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.660831] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 153.683999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.694945] device veth1_vlan entered promiscuous mode [ 153.702794] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 153.713975] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 153.723844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 153.737954] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.746626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 153.758750] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 153.768485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.776673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.784376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.792271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.803072] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 153.811734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.830379] Bluetooth: hci4: command 0x040f tx timeout [ 153.836831] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 153.846382] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 153.856388] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.873745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.883388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.893150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.902322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.911676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.918710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.927436] Bluetooth: hci5: command 0x040f tx timeout [ 153.930744] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 153.941194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.952202] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 153.971099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.981666] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 153.993170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.009756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.017932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.033483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.056222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.073931] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 154.083062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.097553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.117422] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 154.128179] device veth0_macvtap entered promiscuous mode [ 154.136747] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 154.152508] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 154.161410] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 154.171582] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 154.185043] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 154.196560] device veth1_macvtap entered promiscuous mode [ 154.203411] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 154.215645] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 154.231408] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 154.238332] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 154.245833] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.257951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.265957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.274835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.287987] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 154.297859] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 154.314591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 154.326419] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 154.339949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.347727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.360304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.367835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.376415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.383906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.391807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.399580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.409310] device veth0_vlan entered promiscuous mode [ 154.416376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 154.424750] device veth0_vlan entered promiscuous mode [ 154.433637] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 154.492731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.507703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.520449] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 154.527544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.538247] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 154.548352] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 154.557421] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 154.564492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.573403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.581601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.589965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.603381] device veth1_vlan entered promiscuous mode [ 154.618245] device veth1_vlan entered promiscuous mode [ 154.635312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.649853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.663114] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 154.672849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.699304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.699927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.732919] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 154.754907] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 154.764586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.773435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.785460] device veth0_vlan entered promiscuous mode [ 154.796552] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 154.812672] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 154.822873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.833316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.843943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.852477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.875335] device veth1_vlan entered promiscuous mode [ 154.883398] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 154.894487] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 154.905853] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 154.916173] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 154.931080] device veth0_macvtap entered promiscuous mode [ 154.937510] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 154.948436] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 154.958584] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 154.982081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.002875] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.020154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.028653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.049457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.057179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.071640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.082983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.094595] device veth0_vlan entered promiscuous mode [ 155.111674] Bluetooth: hci0: command 0x0419 tx timeout [ 155.119628] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 155.136384] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 155.147106] device veth0_macvtap entered promiscuous mode [ 155.154253] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 155.164310] device veth1_macvtap entered promiscuous mode [ 155.172536] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 155.187355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 155.199230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.206504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.220034] device veth1_macvtap entered promiscuous mode [ 155.226366] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 155.245713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.262497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.272617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.281596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.289803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.307002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 155.323892] device veth1_vlan entered promiscuous mode [ 155.332645] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 155.344394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 155.352542] Bluetooth: hci1: command 0x0419 tx timeout [ 155.376434] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 155.387961] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 155.404871] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 155.417936] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 155.427893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 155.440530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.447920] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.458084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.467746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.476655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.479685] device veth0_macvtap entered promiscuous mode [ 155.490137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.497772] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 155.507334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.518312] Bluetooth: hci2: command 0x0419 tx timeout [ 155.524054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.533752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.543722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.553966] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 155.562075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.571944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.582310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.595445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.605542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.617709] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 155.625335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.639253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.647023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.655974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.664515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.669741] Bluetooth: hci3: command 0x0419 tx timeout [ 155.673328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.686925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.698450] device veth1_macvtap entered promiscuous mode [ 155.709392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.720570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.731054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.741921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.752178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.762775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.774752] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 155.782496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.794023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.804702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.815039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.826898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.836851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.847222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:27:37 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 155.858518] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 155.869394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.884478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.898058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 08:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800)='nl80211\x00') [ 155.928131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.937978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.978498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 155.986780] Bluetooth: hci4: command 0x0419 tx timeout [ 156.007714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 156.018091] Bluetooth: hci5: command 0x0419 tx timeout 08:27:37 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fallocate(r0, 0x11, 0x0, 0xfff000) [ 156.052485] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 156.100051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.128000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.150190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.161093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.171479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.182923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.194115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.205115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.217658] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 156.228175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.241115] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 156.304346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.318110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.352588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.373234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.383617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.396876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.407888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.425365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.435723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.452115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.464183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.478664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.500474] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 156.508049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.519512] device veth0_macvtap entered promiscuous mode [ 156.527001] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 156.543123] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 156.550837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.561710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.577034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.631466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.635226] device veth1_macvtap entered promiscuous mode [ 156.646299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.654945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 156.693805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.737596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 156.772619] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 156.797455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.822515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.833186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:27:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b000000800000000800000052", 0x61, 0x400}], 0x0, &(0x7f0000013c00)) [ 156.844881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.855056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.865915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.876628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.887870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.898348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.913433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.931393] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 156.940994] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 156.948010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.969014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.976368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.984868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.005171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.034008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.061712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.084527] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 157.085218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 08:27:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001800)="ce0138f7991858b076f7b6a0005fe3e370020540e61973fb93ea186a11855c37931bbb23923190878199925d6e4f88c322dc278ffb3c1cb98d25e0dadd52431d301c4d8e56462948fca526e3eaa19d1e6613a8a950477f3a846ad840ebf03fd9c28d54f1e55d689b396684fdb443344b6a4904a0200f7a68b8ab710ff04f12d17ceccfa21e82bd3fe8e9ac3c44373020efbca3140704a20422bb4b9d7327db01eefe1c2c33d83605452d1eacf0e95b4084b58fb60c046cb01a3d80b0a64bdd3ddfe1751f8152060eb3fb443a6581be568390bd12c847f67170cdfb60f566db5e6b7bfdc3b14d72844cb0cc21c8ab09c3e534a831ae39f34ef5c1259cc3dd6e8b9ea0be7220abdc7403423e2dbe5b815a2121d0f6cf8395391208f22ecf6c51f1b850d80572408ef9d5164fe23d04152144dc226bf8404e18a1910d21e8fb27c3e1c22d47a7455414727af9a94736705af33a35602e84269332f5a8a7f2553afe01603bbeb3d7a97c503618ce7ef361e508d241e7ac457b894297fa3298adf86fecf21839d1a01385f717abc7afd9b2a3e5ddfb6894eaec20afa44b18c080a64da57d916a974bccd5e99b2580c2d5753624c168657939655d4bb51a65f3e9f50936c5dcc794de50652fdc1644d92ec30834f84eb038892ad7904a663b68c22b989b6e23184d6369403e62f096c0c67e100a4fc1fa0f714db736cbc1b2ed714f21f279f14dbd332dfc1fc7a465f150ae252b08a152bff043658274ec3b7108f1f92651e14a999a8e64b1ee49a97b7d614434e57be88100bc6e7eb7f3ea7e9c080c67dc003fbc9eeb0454a62ba06ede6dcb49ee3d5f7978052f23b87eb74cd7d83e5b2c32ce7986349d8be995a907d539ab0006a122d727d23d6669a12954db2bf400c3f5d4183cccfc22d5f5688220711b4c14811375ee59a1aad7f18819f2f7e2bf326c52afbe33e8c5d68835b95d9e0c614d27e2b116855140c1db107102af37c479b24ec3e2d59ec4d0b2cea8283560523b65fcd60f470811a0eb0793ebff40f5039b6c32f5c812c03d86ab7299e31a543e822b1df0678cfb8a0064be9cc76c0f267cf5d3457793e45477b19c48b1d4d7822ffd5229e34839a0784ab0cf8e8e06a02722a4c5fef760c6af51bc305f7489e364aa928f0cff32ac4f3e0f56dbcdc031a92c36f384081e4bd8bc96885fee40100eaf78afece1c57a42ef7edc6a0c6c07615d0a56ed087262e53d13ce31fa602c2301520ebf47a67d18641558c7f1fbd90b14626621a854b64bde2e69fc6fd0222fee1466556e8e30f6dd63a9e352dd795b2959ca02cc1ca38039be894deb1cf4939bd6d65265dd6d7e7a8bf45b9f6d9d0bdbb95b92d687588f5a04d2e7b80a06605e933e6b1836be024b7ca19721526b74379dea943e1fbc679be0468fe41ef16c2f571e1578b70b55472b18e78898e6a91a76e9c55027210ac23a33d3ec2e788bf52f38a3c249ffb96b9a9151e899b34ac4dca28f13254fe4517873d8c286545060abce9c8e41c7021814e8c9fae2adfbb10dfccf4a6123430f048e67e51c822cb89e84abbad4dffec52ee5a95267325ecce2a6ab0ca86adf34402c0295140d5a204d4dbc6f7d5e9d574604c7574b4176bc9ce0737035ef2693e2769dfcd777c28d141ed49f5f47a0ca7a3675644cd162eb8d006baa14bad065bbd1752d411ad9d4a25efa26849a5bcd1097c8a8174ec30c210b74dd4e73168550c49f5ca50fbfe3028c99f83f2981e43530c6e77bffda799b603a8eed2b27856cedbce435d47fea25f78c3f151144818dd7294e178b431bed8a06db4e3f410fa4c92549d6c0c85a30fc3a051203317bc5ea6b9765e0c64ed704d76792fbce6293d0f1a423ffb021d323aba0b41056783d78b4cdc522c1825674e15dccc87275b1f7031d3965d918a27588cbd4618702abccfa770c9877fffe1517900f4b919a0ee0ba80d49730b0f5c6eee5ac21b48f03ceba08363c30fee54b441c362cb05987a579513bb0ec094ca8dfa61d842e36eabd445e2e81a3f8819827f2eb38043752da25b6745b81da9b79e1312456a94e4225dee135a378e32b8f676c886ad86e9c429128d43b50151ae1521b5a67d72cde17b69b35b02321492334edae8b07b04d319f970aaaeeeee0f1cec8bee4088a2f4f409a5e91fdd8b428c3a8e3964b030adbc24543aa261af23ff0e448ccbacd04006993e6e19b81b6c3d3c25da15d364daca2759ec63f5a8c421c0d2595474b042bf1440f98364d0b6862cb5d1cab37becc5cd3bf315218a16ced986922109e8e997f9b03e27f500267c5afecdf24c1367fb828f0978ea638a1d7608fc9b72c2b5fc854341e5b0c5284d9143491722d03db90415d879ddccd82da86e43945c442509f5cff3662fa051cf341c9619433c451a260e05a3a417d2c53fbd2e9fd321dfb2c8de9d227638047868a9b048be97b44bbf2ef8fc4c631e7ffe4cb25c11e736399dd6a4bf8edf68e52870a81fabaa37b138e12f73e383f1ec393354f5582e6c296ec696c967bee4b9be3838f4ac45ca47d81b537669f36af4e48433e645b9ad383da9407b74825671d3f575f520a91a35c0ea2a6c59d0d4fbc13ebdf86926614941d75783fdabbc7d00a394c1ab339c10f27188f835c4597a878dda19d390fe71a735e024d3fa2a7473cd8aa31b468b3e2555bcc3db04d3d6cd7b21e5ae9aba1171e09b6e665ab0f086a5c5e2c4afc1d04ec53e43f2f30fe258e248b09afa5b8a956641e0af351afdfa74f56aef7bb456ed8c2d94f046f8ee8c7a251634000bfc9aff9585a385695bd624764830b12d77c012419821c296f2c32ab50948eb7364cf22f208eaa1276043611", 0x7e9}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4107, 0x100b}], 0x1}, 0x40000100) [ 157.104421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.116077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.127929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.138124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.151552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.161656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 157.179705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.192385] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 157.200903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.210128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.217442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.248603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.415897] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 157.453372] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready 08:27:38 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x86100, 0x0) [ 157.453827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.517471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.532181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:27:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 157.558130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.584743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.599464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.612267] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 157.622184] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 157.632712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.640093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.647211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.665803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.707911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.716676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:27:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@tclass={{0x14}}], 0xf}, 0x0) [ 157.895048] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 157.927830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.954097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800)='nl80211\x00') [ 158.092637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.128922] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 158.179036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.202270] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 158.216967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.236611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.251524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.286533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.323352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.345682] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 158.355746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.372132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.402764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.465115] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 158.493018] EXT4-fs error (device loop3): ext4_mb_generate_buddy:744: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 08:27:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0x39, 0x0) 08:27:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 08:27:39 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 08:27:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x0, 0x3, 0x0, 0xffff}, @mpls={[], @ipv4=@tcp={{0x5, 0x2, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 08:27:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:39 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) 08:27:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 08:27:39 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 08:27:39 executing program 1: sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x2, &(0x7f0000000000)) 08:27:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 08:27:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:39 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x301000, 0x0) [ 158.815318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 08:27:40 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c00, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:27:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0x39, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee00, 0xffffffffffffffff) 08:27:40 executing program 5: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) 08:27:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fallocate(r1, 0x11, 0x0, 0xfff000) [ 158.929071] hrtimer: interrupt took 55062 ns 08:27:40 executing program 1: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) sync() 08:27:40 executing program 5: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) [ 159.050710] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 08:27:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x101, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x28}}, 0x0) [ 159.136975] EXT4-fs error (device loop0): ext4_mb_generate_buddy:744: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 08:27:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[], 0x39, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0xee00, 0xffffffffffffffff) 08:27:40 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 08:27:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote, @remote, @private0, 0x81}) [ 159.483077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 159.581159] EXT4-fs error (device loop0): ext4_mb_generate_buddy:744: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 08:27:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x101, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x28}}, 0x0) 08:27:41 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c00, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:27:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:41 executing program 0: socket$inet6(0xa, 0x5, 0x0) 08:27:41 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x4, 0x0) 08:27:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={0x0}}, 0x0) 08:27:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000180)={'security\x00', 0x4, "2b9d8953"}, &(0x7f0000000280)=0x28) 08:27:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x60008040) 08:27:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:27:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000180)="2719ed22a075783c0a315ef34c4ea69f", 0x10) 08:27:41 executing program 2: socket$tipc(0x1e, 0x0, 0x0) 08:27:41 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x50, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0xf84a97779fca9284) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000e00)={@empty, @local, @empty, 0x0, 0x3f}) 08:27:42 executing program 3: clock_adjtime(0x0, &(0x7f00000020c0)={0x3f, 0x0, 0x0, 0x0, 0x0, 0x3}) 08:27:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00b1dd"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 08:27:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x290, 0x290, 0x290, 0x0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@ipv4={[], [], @multicast2}, [], @ipv6=@local}, {@ipv4=@multicast1, [], @ipv6=@empty}, {@ipv4=@multicast1, [], @ipv6=@private2}, {@ipv4=@remote, [], @ipv4=@local}], 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x40000, 'pptp\x00', 'syz1\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 08:27:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000a80)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 08:27:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000180), 0x0) 08:27:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 161.095773] xt_CT: You must specify a L4 protocol and not use inversions on it 08:27:42 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x490aa2, 0x0) 08:27:42 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) 08:27:42 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0xf84a97779fca9284) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 08:27:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000a80)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 08:27:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) 08:27:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') read$FUSE(r0, 0x0, 0x0) 08:27:42 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x301000, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 08:27:42 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x50, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0xf84a97779fca9284) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:42 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x4c00, 0x0) 08:27:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter6\x00') read$FUSE(r0, 0x0, 0x0) 08:27:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c2", 0x61, 0x400}], 0x0, &(0x7f0000012f00)) 08:27:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x198, 0x4000000, 0x158, 0x0, 0x0, 0x2a8, 0x240, 0x240, 0x2a8, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x198, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'sit0\x00', {0x0, 0x0, 0x10001, 0x0, 0x0, 0x9, 0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 08:27:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x3e}}], 0x18}, 0x0) [ 161.670738] EXT4-fs (loop5): unsupported descriptor size 0 [ 161.695856] xt_CT: No such helper "pptp" 08:27:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000e00)={@empty, @local, @empty}) [ 161.737434] EXT4-fs (loop5): unsupported descriptor size 0 [ 161.794031] xt_CT: No such helper "pptp" 08:27:43 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, 0x0) 08:27:43 executing program 1: connect$tipc(0xffffffffffffffff, 0x0, 0x0) 08:27:43 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/loop-control\x00', 0x0, 0x0) 08:27:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0xf84a97779fca9284) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:27:43 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0xf84a97779fca9284) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 08:27:43 executing program 4: socket(0xa, 0x6, 0x0) 08:27:43 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x40202, 0x0) 08:27:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0) 08:27:43 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x50, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0xf84a97779fca9284) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x0) [ 162.427421] audit: type=1400 audit(1602404863.557:9): avc: denied { create } for pid=8283 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:27:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x48802, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000003dc0)={@void, @val={0x0, 0x3, 0x0, 0x400}, @mpls={[], @ipv6=@udp={0x0, 0x6, "d26fc7", 0x3e1, 0x11, 0x0, @private1, @loopback, {[@dstopts={0x0, 0x6a, [], [@jumbo, @generic={0x0, 0xa0, "63232dddb2100be4b6c78ee6f966364c3af41273087a1fdb8853e3a0f7fe73ba373da9fe8ec78efd6c448ba89c42f740f15e454bfd6b0156feba7a1523b536f3fa065d52eb8505c5af0ac2aaaae12d511d11c9c2c413c545eecc33683e004d1f516057c94bdb6b349770b731d7b6b032cd4c7e604bbb5196264891d8b69adca1eaf40b928c1487f89f8480d780432341c4394e93f235269bc3fc0fbf519536a8"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @pad1, @generic={0x0, 0x29d, "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"}]}], {0x0, 0x0, 0x81, 0x0, @opaque="7a30acf32871803cf4cc430d5c17db991b8404e4f1c880c2ad5731bbc0aae7563373f1c7dc7ae9e899b578cfe4f8e9b7c5de0d5a1e44e38de154af08e9c4f0a74dc1207f380bde7a57b6b5259af49f3488626d6cb88d83e6193e841de214dea7828aba84e05954bbc0a0bb94fbf544fff1fa5b1ab8bf9fd9ff"}}}}}, 0x413) 08:27:43 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 08:27:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, r2) 08:27:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={0x0}}, 0x0) 08:27:43 executing program 0: pipe(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 162.596709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 08:27:44 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={0x0}}, 0x81) 08:27:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, r2) 08:27:44 executing program 1: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 08:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 08:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={0x0}}, 0x0) [ 163.117157] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 08:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f00000001c0)={@void, @val, @mpls={[], @ipv4=@tcp={{0x5, 0x2, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) 08:27:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:44 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r1 = memfd_create(&(0x7f0000000000), 0x0) sendfile(r1, r0, 0x0, 0xfffffffe) 08:27:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, r2) 08:27:44 executing program 3: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 163.532454] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 08:27:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x7, 0x3, {{0x16, 0x4, 0x0, 0x8, 0x58, 0x0, 0x0, 0x3, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@end, @timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x4, [{@rand_addr=0x64010100}, {@private=0x1ff, 0xffffffff}, {@remote, 0x9}, {@loopback, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0x0, [{@multicast2, 0x7ff}]}, @lsrr={0x83, 0x13, 0x5a, [@broadcast, @multicast1, @multicast1, @dev]}]}}}}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 08:27:44 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/keycreate\x00', 0x2, 0x0) 08:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0) 08:27:44 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r1, r2) 08:27:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x1000) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x100) 08:27:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 163.894616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 08:27:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 164.270958] audit: type=1804 audit(1602404865.337:10): pid=8416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir122278452/syzkaller.cDnByu/16/bus" dev="sda1" ino=15813 res=1 08:27:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:45 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:27:45 executing program 1: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) [ 164.435338] audit: type=1804 audit(1602404865.387:11): pid=8417 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir122278452/syzkaller.cDnByu/16/bus" dev="sda1" ino=15813 res=1 08:27:45 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000100)) waitid(0x0, 0xffffffffffffffff, &(0x7f00000009c0), 0x4, 0x0) 08:27:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x5411, &(0x7f0000000040)) 08:27:45 executing program 4: syz_genetlink_get_family_id$ipvs(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/loop-control\x00', 0x0, 0x0) 08:27:45 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 164.817759] audit: type=1804 audit(1602404865.947:12): pid=8439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir122278452/syzkaller.cDnByu/16/bus" dev="sda1" ino=15813 res=1 08:27:46 executing program 3: r0 = openat$vnet(0xffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) 08:27:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPKT(r0, 0x5412, &(0x7f0000000040)) 08:27:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x5414, &(0x7f0000000040)) 08:27:46 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 164.976396] audit: type=1804 audit(1602404865.947:13): pid=8417 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir122278452/syzkaller.cDnByu/16/bus" dev="sda1" ino=15813 res=1 08:27:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:27:46 executing program 4: 08:27:46 executing program 2: 08:27:46 executing program 4: [ 165.158331] ================================================================================ [ 165.167339] UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56 [ 165.174365] index 4 is out of range for type 'insn_byte_t [4]' [ 165.180356] CPU: 0 PID: 8461 Comm: syz-executor.5 Not tainted 4.19.150-syzkaller #0 [ 165.188163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.197556] Call Trace: [ 165.200711] dump_stack+0x22c/0x33e [ 165.204364] ubsan_epilogue+0xe/0x3a [ 165.208106] __ubsan_handle_out_of_bounds.cold+0x63/0x6f [ 165.213630] arch_uprobe_analyze_insn+0x9d8/0xaa0 [ 165.218521] ? default_abort_op+0x110/0x110 [ 165.222866] ? do_read_cache_page+0xfe/0x11d0 [ 165.228064] ? copy_insn+0x3f3/0x4f0 [ 165.232149] uprobe_mmap+0x8c2/0xa70 [ 165.236180] ? uprobe_apply+0x160/0x160 [ 165.240548] mmap_region+0x552/0x1510 [ 165.244399] ? vm_brk+0x20/0x20 [ 165.247730] ? security_mmap_addr+0x73/0x90 [ 165.252643] ? get_unmapped_area+0x296/0x3b0 08:27:46 executing program 4: [ 165.257079] do_mmap+0x8e8/0x1080 [ 165.260641] vm_mmap_pgoff+0x197/0x200 [ 165.264558] ? vma_is_stack_for_current+0xc0/0xc0 [ 165.270643] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 165.274899] ? put_timespec64+0xcb/0x120 [ 165.278984] ? jiffies_to_timeval+0xb0/0xb0 [ 165.283423] ksys_mmap_pgoff+0x2d1/0x660 [ 165.287514] ? find_mergeable_anon_vma+0x260/0x260 [ 165.292614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 165.298042] ? trace_hardirqs_off_caller+0x6e/0x210 [ 165.303835] ? do_syscall_64+0x21/0x670 08:27:46 executing program 4: [ 165.307935] do_syscall_64+0xf9/0x670 [ 165.311772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.318334] RIP: 0033:0x45de59 [ 165.322936] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.342114] RSP: 002b:00007ff8d5980c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 165.350033] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045de59 [ 165.357417] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 165.365419] RBP: 000000000118bf78 R08: 0000000000000003 R09: 0000000000000000 [ 165.373053] R10: 0000000000000412 R11: 0000000000000246 R12: 000000000118bf2c [ 165.380480] R13: 00007ffc5839b50f R14: 00007ff8d59819c0 R15: 000000000118bf2c [ 165.387784] ================================================================================ 08:27:46 executing program 1: 08:27:46 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2b000000ed0000000000fd"], 0x2b) 08:27:46 executing program 4: 08:27:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x408000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 08:27:46 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:47 executing program 4: 08:27:47 executing program 3: 08:27:47 executing program 2: 08:27:47 executing program 1: 08:27:47 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:47 executing program 4: 08:27:47 executing program 3: 08:27:47 executing program 2: 08:27:47 executing program 1: 08:27:47 executing program 4: 08:27:47 executing program 0: 08:27:47 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:47 executing program 3: 08:27:47 executing program 1: 08:27:47 executing program 4: 08:27:47 executing program 2: 08:27:47 executing program 4: 08:27:47 executing program 3: 08:27:47 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x10600, 0x0) 08:27:47 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:47 executing program 2: 08:27:47 executing program 1: 08:27:47 executing program 0: 08:27:48 executing program 4: 08:27:48 executing program 2: 08:27:48 executing program 3: 08:27:48 executing program 1: 08:27:48 executing program 0: 08:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:48 executing program 4: 08:27:48 executing program 3: 08:27:48 executing program 2: 08:27:48 executing program 0: 08:27:48 executing program 1: 08:27:48 executing program 0: 08:27:48 executing program 3: 08:27:48 executing program 2: 08:27:48 executing program 4: 08:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:48 executing program 1: 08:27:48 executing program 0: 08:27:48 executing program 3: 08:27:48 executing program 2: 08:27:48 executing program 4: 08:27:48 executing program 1: 08:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:48 executing program 0: 08:27:48 executing program 3: 08:27:48 executing program 2: 08:27:48 executing program 4: 08:27:48 executing program 1: 08:27:48 executing program 2: 08:27:48 executing program 3: 08:27:48 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:48 executing program 0: 08:27:48 executing program 4: 08:27:48 executing program 3: 08:27:48 executing program 2: 08:27:48 executing program 1: 08:27:48 executing program 5: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 08:27:48 executing program 0: 08:27:48 executing program 4: 08:27:48 executing program 2: 08:27:48 executing program 1: 08:27:48 executing program 3: 08:27:48 executing program 0: 08:27:48 executing program 4: 08:27:48 executing program 5: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 08:27:48 executing program 1: 08:27:48 executing program 2: 08:27:48 executing program 3: 08:27:48 executing program 1: 08:27:48 executing program 4: 08:27:48 executing program 5: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 08:27:48 executing program 0: 08:27:49 executing program 2: 08:27:49 executing program 3: 08:27:49 executing program 1: 08:27:49 executing program 4: 08:27:49 executing program 3: 08:27:49 executing program 0: 08:27:49 executing program 2: 08:27:49 executing program 1: 08:27:49 executing program 5: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 4: 08:27:49 executing program 3: 08:27:49 executing program 0: 08:27:49 executing program 2: 08:27:49 executing program 1: 08:27:49 executing program 2: 08:27:49 executing program 0: 08:27:49 executing program 3: 08:27:49 executing program 5: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 4: 08:27:49 executing program 2: 08:27:49 executing program 0: 08:27:49 executing program 1: 08:27:49 executing program 4: 08:27:49 executing program 3: 08:27:49 executing program 5: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 2: 08:27:49 executing program 1: 08:27:49 executing program 0: 08:27:49 executing program 4: 08:27:49 executing program 3: 08:27:49 executing program 2: 08:27:49 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 1: 08:27:49 executing program 0: 08:27:49 executing program 4: 08:27:49 executing program 2: 08:27:49 executing program 3: 08:27:49 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 1: 08:27:49 executing program 0: 08:27:49 executing program 4: 08:27:49 executing program 1: 08:27:49 executing program 3: 08:27:49 executing program 2: 08:27:49 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:49 executing program 4: 08:27:49 executing program 0: 08:27:49 executing program 1: 08:27:49 executing program 3: 08:27:49 executing program 2: 08:27:49 executing program 4: 08:27:50 executing program 1: 08:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:50 executing program 0: 08:27:50 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 08:27:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) 08:27:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 08:27:50 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:27:50 executing program 0: 08:27:50 executing program 3: [ 169.007953] x_tables: duplicate underflow at hook 3 08:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:50 executing program 1: clock_gettime(0x0, &(0x7f0000000600)) 08:27:50 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x8a00) 08:27:50 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 08:27:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x0, 0x60c02) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ba, 0x38}, [{0x0, 0x0, 0x0, 0x8}], "78f23791ecf9e1d65e3f3531c7fe95eb44b621e056d572ba4fed067fcfb2a883f4fb53c7a58ab2475783a82482cf36b6fe709076b77478f7b07cd231cb766d26c446a3334ecd083adb145621fd3eb284abdb7e273b7355b237a93ee7e60430b84fe299eeb139ad663fc16a10af3cf629ad6888e4851c35500e0e806fd36e952883e7816e969ad024826bfdafae5d05d7ca6ccc066fbc3f79b007944ff2bb4485f9e5211153df5b08d62db2df544c3014573d3c7e8128a2308bdd350903c546a68db9523abd3f6f66d71e57d73a9bb6ff", [[], [], [], []]}, 0x528) 08:27:50 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 'rr\x00', 0x0, 0x6, 0x5e}, 0x2c) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:50 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 08:27:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 08:27:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x570, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'bridge0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x3}}}, {{@ipv6={@mcast1, @private2, [], [], 'veth1_to_bond\x00', 'virt_wifi0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x7fff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'caif0\x00', 'vlan0\x00'}, 0x0, 0x220, 0x280, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'veth0_to_bond\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 08:27:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 08:27:50 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "df65b8d1ff2b1037cd8ef543062190e6"}) 08:27:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 08:27:51 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000640)='tmpfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x18004c0, &(0x7f0000000780)={[{@mode={'mode'}}], [{@fsmagic={'fsmagic'}}]}) 08:27:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@chsw_timing={0x68, 0x4}, @ht={0x2d, 0x1a}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x58}}, 0x0) [ 169.885306] x_tables: duplicate underflow at hook 2 08:27:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:51 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) 08:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:27:51 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000180)=0x400) [ 170.371914] tmpfs: Bad mount option fsmagic [ 170.426083] tmpfs: Bad mount option fsmagic 08:27:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f8921c81"}, 0x0, 0x0, @planes=0x0, 0x3f}) 08:27:51 executing program 3: syz_mount_image$tmpfs(&(0x7f0000001100)='tmpfs\x00', &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={[], [{@uid_eq={'uid'}}, {@euid_lt={'euid<'}}]}) 08:27:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x388, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x188, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'ip6gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1db5}}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'erspan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 08:27:51 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 08:27:51 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r1, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 08:27:51 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:51 executing program 0: syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x10000000, 0x301) [ 170.716198] x_tables: duplicate underflow at hook 3 [ 170.720621] tmpfs: No value for mount option 'euid<00000000000000000000' 08:27:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000540)) 08:27:51 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffffffffffff) [ 170.770605] tmpfs: No value for mount option 'euid<00000000000000000000' 08:27:52 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000005280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "9cc33da968b50a4ce415dc6bb3c6d7fc2977c0373e455865d3cdb32ba688f3c8b44d31949132cfbec0f7b8028a4afe7f730713718f7fa1145f41f7d217c2cc", 0x17}, 0x60) 08:27:52 executing program 3: 08:27:52 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x989680}) 08:27:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:52 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000001100)='tmpfs\x00', &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)) renameat2(r0, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000780)='./file0\x00', 0x4) 08:27:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_elf32(r0, 0x0, 0x9b1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 08:27:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x3, 0x3f, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x9, 0x42]}) [ 170.990440] audit: type=1400 audit(1602404872.127:14): avc: denied { write } for pid=8805 comm="syz-executor.4" path="socket:[32456]" dev="sockfs" ino=32456 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:27:52 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:27:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)) 08:27:52 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 08:27:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:52 executing program 3: timer_create(0x1, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) 08:27:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f0000000200)) 08:27:52 executing program 4: socketpair(0x29, 0x5, 0x1, 0x0) 08:27:52 executing program 0: socket(0x25, 0x5, 0x5) 08:27:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x0, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}, @common=@dst={{0x48, 'dst\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2, @private0}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 08:27:52 executing program 3: syz_mount_image$tmpfs(&(0x7f0000001100)='tmpfs\x00', &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)={[{@nr_blocks={'nr_blocks'}}]}) 08:27:52 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) [ 171.775240] x_tables: duplicate underflow at hook 2 08:27:53 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "493e0418"}}) 08:27:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)) 08:27:53 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x39800, 0x0) 08:27:53 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 08:27:53 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 08:27:53 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000040)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000000)) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 08:27:53 executing program 2: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getdents64(r0, 0x0, 0x0) 08:27:53 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 08:27:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x570, 0xffffffff, 0x160, 0x268, 0x160, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'bridge0\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@dst={{0x48, 'dst\x00'}, {0x0, 0x0, 0x446327613757b9f}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@mcast1, @private2, [], [], 'macsec0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'caif0\x00', 'vlan0\x00'}, 0x0, 0x1d8, 0x238, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@inet=@recent1={{0x108, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 08:27:53 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 08:27:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x85097, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="b40600000000000071114800000000008510000002000000851000000700000095004c00000000009500001200000000af5705b43ecb56fc4732e8f175a0c33349e9c8ef370f8a3f7306294c4ad0281fea0a8bf51b886bb3464aaff5343aab4d86b7d7983b419e26edb3e6adecd61d01148e75d5c458bb4355833437c6327dd5e6827a4b9b1cc42a6aab309fd44ca0356a64a3d22755b6"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) unshare(0x20020000) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) renameat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000000)='./file0\x00') [ 172.674805] x_tables: duplicate underflow at hook 2 08:27:53 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 08:27:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x240, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'ipvlan0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'veth1_vlan\x00'}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 08:27:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x2, 'syz0\x00'}}) [ 172.737290] FAT-fs (loop3): Directory bread(block 6) failed 08:27:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 172.804656] x_tables: duplicate underflow at hook 2 08:27:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x0, @userptr}) 08:27:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c8"]) 08:27:54 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 08:27:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 172.950441] tmpfs: No value for mount option 'È' 08:27:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x570, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x4a0, 0x4a0, 0x4a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'bridge0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x3}}}, {{@ipv6={@mcast1, @private2, [], [], 'veth1_to_bond\x00', 'virt_wifi0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xe89a, 0x0, 0x0, 0x7fff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'caif0\x00', 'vlan0\x00'}, 0x0, 0x220, 0x280, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'veth0_to_bond\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) [ 172.974662] tmpfs: No value for mount option 'È' 08:27:54 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 08:27:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0x1e0, 0x0, 0xffffffff, 0x318, 0x1e0, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@dev, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key}}}, {{@ipv6={@private2, @mcast2, [], [], 'syz_tun\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) getpid() ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x3e68, 0x3b92e44e}) 08:27:54 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000580)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x88) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88002) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x7ff, 0xc0, "66298cc9dab5ac433434dbece278e5be6d9d823cd2b436b4af3faebebb28ee72882bb2aee49a429da3d421def1c51e0962bae09b416e0624d88d46eb90a22a971ed804520d0f1a2cdd9769fcca72f8ed7063da95e3715f4ce5fb2fe4c3f8b26122e636e94fccd47bf68f7d29e0ff9f4215ee360585576b75da9ee46f38a491dd5923550e2b0b4b9913dc0857da256486edf75f0ee60ed51540336dc06715bdd9f66e7ca6e0ef306152187a7d89dbb02f2a9ccd03bf466a077baf708ce204ad12"}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x3, 0x1, 0xd, 0x0, 0x0, &(0x7f00000007c0)}) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000004c0)=""/163) r2 = socket$inet6(0xa, 0x80003, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) getpid() ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x3e68, 0x3b92e44e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) 08:27:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) [ 173.122756] x_tables: duplicate underflow at hook 2 [ 173.131284] x_tables: duplicate underflow at hook 1 08:27:54 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 08:27:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x800, 0x8, [0x0, 0x0]}) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 1: r0 = gettid() ptrace$peek(0xffffffffffffffff, r0, 0x0) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001a40)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 08:27:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000180)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}}) 08:27:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 08:27:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7}}}, {{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 08:27:54 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) getpid() ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x3e68, 0x3b92e44e}) 08:27:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2d, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x3f]}) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x0, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @private2, [], [0x0, 0xffffff00], 'vcan0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x32, 0x0, 0x0, 0x30}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1080}}, @common=@dst={{0x48, 'dst\x00'}, {0x0, 0x0, 0x0, [0x800, 0xec, 0x0, 0x3, 0x4c94, 0x8, 0x4, 0x3f, 0x4, 0x2, 0xb1, 0x1, 0xca, 0x9, 0x800], 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x830000, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2, @private0}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x2, 0x5]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 08:27:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000280)=""/136, &(0x7f0000000340)=0x88) [ 173.585939] x_tables: duplicate underflow at hook 3 08:27:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000001) [ 173.616198] x_tables: duplicate underflow at hook 2 08:27:54 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001a40)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "bdabd9c1c7a01d4bc2121e28173f49a5fc2d73e1c3a6d90d37856f32218d3ea2da1ca29b07ccf6e6d792c5e7185caa546a7405a60bb5b95e450b30d1eff94f"}, 0x60, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}], 0x1, 0x0) 08:27:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2a86, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-monitor\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840)='ethtool\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dlm-monitor\x00', 0x4000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000ac0)={0x8, 0x120, 0xfa00, {0x0, {0x80000001, 0xfff, "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", 0x0, 0x5, 0x0, 0x0, 0x0, 0x90}}}, 0x128) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001100)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001280)='/dev/dlm-monitor\x00', 0x12302, 0x0) syz_mount_image$squashfs(&(0x7f00000012c0)='squashfs\x00', &(0x7f0000001300)='./file0\x00', 0x2, 0x1, &(0x7f00000013c0)=[{&(0x7f0000001340)="37b7fabadae6740ce51fb1f3dd39eb031b77089af71adb9cb33c5f5fb5a51a01623f031df9313aa1ea6f6a71eda792b1c6633344e49cec790fb266661ec949", 0x3f}], 0x28010, &(0x7f0000001400)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'geneve1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '0000:00:10.0\x00'}}, {@obj_type={'obj_type', 0x3d, '0000:00:10.0\x00'}}, {@euid_eq={'euid'}}, {@appraise_type='appraise_type=imasig'}, {@measure='measure'}]}) 08:27:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8}, 0x10) 08:27:54 executing program 4: syz_mount_image$tmpfs(&(0x7f0000001100)='tmpfs\x00', &(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 08:27:54 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:54 executing program 2: syz_mount_image$fuse(&(0x7f0000002a00)='fuse\x00', &(0x7f0000002a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 173.802955] tmpfs: Bad value '0xffffffffffffffff' for mount option 'uid' [ 173.839954] tmpfs: Bad value '0xffffffffffffffff' for mount option 'uid' 08:27:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0x0, 0x300, 0xffffffff, 0x208, 0xf0, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ipv6={@dev, @mcast2, [], [], 'xfrm0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@loopback, @ipv6=@local, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"8049"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'bridge_slave_0\x00', 'vcan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev, @ipv4=@broadcast, @icmp_id, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 08:27:55 executing program 1: syz_mount_image$squashfs(&(0x7f0000000180)='squashfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x100000000}], 0x0, &(0x7f00000009c0)) 08:27:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x4, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb) r4 = socket$inet6(0xa, 0x3, 0x7f) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') 08:27:55 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack_expect\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 08:27:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 174.000226] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop1 [ 174.029865] x_tables: duplicate underflow at hook 1 08:27:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) 08:27:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 174.114450] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop1 08:27:55 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 08:27:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'veth1_to_bond\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ipv6={@mcast2, @dev, [], [], 'xfrm0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 08:27:55 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x1, 0x60c02) write$P9_RSYMLINK(r0, &(0x7f0000000600)={0x14}, 0x14) 08:27:55 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000ac0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "45a992aa624584f8f5845fa904b941203088813d83de40a4d17bf1d9c00453be0f08b0096b7e04a9c5b0d223078c3c9b023c0309562bab5db181d9a758bed3434b31ba35cabc2afe7b2a8f43f37ec94b312c43c24d594058362cb2b32366caad60985e30a52c92aabee07239b0af7622cac817cee56dd910ff3023cf5a59b4a617665ddd7502f8f98073380a64318f9cc1d701731652e486cbb462c06b268fd163d95b6d9ebc5fdbb0e919c6b4d70670146ec2aac689d44ddc1b2c8712a6c67d3b2c7839c9b9e757a5e7c5c85a61c4942ec0ea52687ed5803554bc028cd9a1aea7d2651e3511b166e9a73918ef20d96fc5edf50c99f728a1b0b2575a76a13154"}}}, 0x128) 08:27:55 executing program 2: r0 = socket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000e00)={&(0x7f00000003c0), 0xc, &(0x7f0000000dc0)={0x0}}, 0x0) 08:27:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) [ 174.417717] x_tables: duplicate underflow at hook 3 08:27:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000440)={'broute\x00'}, &(0x7f00000004c0)=0x78) 08:27:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:56 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x0, 0x60c02) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "78f2373b1dd1a1f8abc17521a969c101f9e1d65e3f3531c7fe95eb44b621e056d572ba4fed067fcfb2a883f4bb53c7a58ab2475783a82482cf36b6fe709076138cd16acaadcdd1cb766d26c446a3334ecd083adb145621fd3e0200abdb7e273b7355b237a93ee7e60430b84fe299eeb139ad663fc16a10af3cf629ad6888e4851c35500e0e806fd36e952883e7816e969ad024826b00becb8e05d7ca6ccc066fbc3f79b007944ff2bb4485f9e5211153df5b08d62db2df544c3014573d3c7e8128a2308bdd350903c546a68db9523abd3f6f66d71e57d73a9bb6ff59b6f3"}, 0x136) 08:27:56 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1ab, 0x0, 0x0) 08:27:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 08:27:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5b2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 08:27:56 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0xb12401, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 08:27:56 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x3, 0x1, 0xd, 0x0, 0x0, &(0x7f00000007c0)}) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000004c0)=""/163) r3 = socket$inet6(0xa, 0x80003, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) getpid() ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x3e68, 0x3b92e44e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) 08:27:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), 0x4) syz_open_procfs(0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) getpid() ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x3e68, 0x3b92e44e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) 08:27:56 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, 0x0) 08:27:56 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 08:27:56 executing program 3: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x16f600)