[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. 2020/09/02 23:59:51 fuzzer started 2020/09/02 23:59:51 dialing manager at 10.128.0.26:33571 2020/09/02 23:59:52 syscalls: 3332 2020/09/02 23:59:52 code coverage: enabled 2020/09/02 23:59:52 comparison tracing: enabled 2020/09/02 23:59:52 extra coverage: enabled 2020/09/02 23:59:52 setuid sandbox: enabled 2020/09/02 23:59:52 namespace sandbox: enabled 2020/09/02 23:59:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/02 23:59:52 fault injection: enabled 2020/09/02 23:59:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/02 23:59:52 net packet injection: enabled 2020/09/02 23:59:52 net device setup: enabled 2020/09/02 23:59:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/02 23:59:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/02 23:59:52 USB emulation: enabled 2020/09/02 23:59:52 hci packet injection: enabled 00:02:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0xbd, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:02:54 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x2, 0xf94, 0x80000001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x1c575) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket(0x4, 0x1, 0x100) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@delchain={0x24, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4000}}}, 0x24}, 0x8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'batadv_slave_0\x00', {}, 0xbcbe}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r6, 0x0, 0x58, 0x1, 0x3f, 0x0, @ipv4={[], [], @rand_addr=0x64010102}, @mcast1, 0x80, 0x8, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250d00000018000180140002006272696467655f736c6176655f3100000c00018008000300030000002000018008000100", @ANYBLOB, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468305f6d6163767461700000200860000002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="3400018014000200766c616e3000000000000000000000000800030001000000140002006d6163766c616e31000000000000000088000180080001", @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x80) 00:02:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) read(r2, &(0x7f0000000040)=""/69, 0x45) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x40, 0x1, 0x2}, 0x10) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @local, 0x7}, 0x6c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 00:02:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00,\x007\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000050000000a00010062"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 00:02:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) unshare(0x24020400) setuid(r2) ioctl$LOOP_CHANGE_FD(r0, 0x401870c8, 0xffffffffffffffff) 00:02:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x44000600) ioctl$EVIOCSKEYCODE_V2(r0, 0x400445a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, "11e327eb03dfeb584d64bf77e8f8cf60c6d0d78ad202025f160cae68cbecc38e"}) syzkaller login: [ 242.479348][ T6838] IPVS: ftp: loaded support on port[0] = 21 [ 242.610205][ T6840] IPVS: ftp: loaded support on port[0] = 21 [ 242.755917][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 242.887792][ T6842] IPVS: ftp: loaded support on port[0] = 21 [ 242.967609][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 242.980708][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.999004][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.010838][ T6838] device bridge_slave_0 entered promiscuous mode [ 243.054854][ T6844] IPVS: ftp: loaded support on port[0] = 21 [ 243.068424][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.078738][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.097091][ T6838] device bridge_slave_1 entered promiscuous mode [ 243.216318][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.296121][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.314628][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.318731][ T6846] IPVS: ftp: loaded support on port[0] = 21 [ 243.321788][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.335873][ T6840] device bridge_slave_0 entered promiscuous mode [ 243.390398][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.399097][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.427267][ T6840] device bridge_slave_1 entered promiscuous mode [ 243.451453][ T6838] team0: Port device team_slave_0 added [ 243.514077][ T6838] team0: Port device team_slave_1 added [ 243.531793][ T6848] IPVS: ftp: loaded support on port[0] = 21 [ 243.555901][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.573077][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.697908][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.707856][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.737025][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.785637][ T6840] team0: Port device team_slave_0 added [ 243.798970][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.807641][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.835071][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.853909][ T6840] team0: Port device team_slave_1 added [ 243.860182][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 243.898524][ T6844] chnl_net:caif_netlink_parms(): no params data found [ 243.975801][ T6838] device hsr_slave_0 entered promiscuous mode [ 243.986791][ T6838] device hsr_slave_1 entered promiscuous mode [ 243.997680][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.004795][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.032388][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.101860][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.109483][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.136469][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.198739][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.206993][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.215840][ T6842] device bridge_slave_0 entered promiscuous mode [ 244.232497][ T6846] chnl_net:caif_netlink_parms(): no params data found [ 244.267793][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.275251][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.282921][ T6842] device bridge_slave_1 entered promiscuous mode [ 244.344813][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.359045][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.386216][ T6840] device hsr_slave_0 entered promiscuous mode [ 244.394003][ T6840] device hsr_slave_1 entered promiscuous mode [ 244.400502][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.408659][ T6840] Cannot create hsr debugfs directory [ 244.478232][ T2464] Bluetooth: hci0: command 0x0409 tx timeout [ 244.497549][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.505765][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.514987][ T6844] device bridge_slave_0 entered promiscuous mode [ 244.549361][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.557525][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.568486][ T6844] device bridge_slave_1 entered promiscuous mode [ 244.604115][ T6842] team0: Port device team_slave_0 added [ 244.616167][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 244.633797][ T2574] Bluetooth: hci1: command 0x0409 tx timeout [ 244.652054][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.677934][ T6842] team0: Port device team_slave_1 added [ 244.698495][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.707844][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.716121][ T6846] device bridge_slave_0 entered promiscuous mode [ 244.725027][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.761630][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.774774][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.800921][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.816471][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.824121][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.831838][ T6846] device bridge_slave_1 entered promiscuous mode [ 244.864411][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.871364][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.902854][ T2574] Bluetooth: hci2: command 0x0409 tx timeout [ 244.905700][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.938810][ T6844] team0: Port device team_slave_0 added [ 244.988825][ T6844] team0: Port device team_slave_1 added [ 245.021335][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.033582][ T2574] Bluetooth: hci3: command 0x0409 tx timeout [ 245.056692][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.065719][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.092562][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.108157][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.116048][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.142458][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.156602][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.221649][ T6846] team0: Port device team_slave_0 added [ 245.249323][ T6842] device hsr_slave_0 entered promiscuous mode [ 245.256680][ T6842] device hsr_slave_1 entered promiscuous mode [ 245.264246][ T6842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.271803][ T6842] Cannot create hsr debugfs directory [ 245.277659][ T2574] Bluetooth: hci4: command 0x0409 tx timeout [ 245.287592][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.300631][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.308735][ T6848] device bridge_slave_0 entered promiscuous mode [ 245.322230][ T6846] team0: Port device team_slave_1 added [ 245.344662][ T6838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.361255][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.368424][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.381495][ T6848] device bridge_slave_1 entered promiscuous mode [ 245.398923][ T6844] device hsr_slave_0 entered promiscuous mode [ 245.405977][ T6844] device hsr_slave_1 entered promiscuous mode [ 245.412549][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.421332][ T6844] Cannot create hsr debugfs directory [ 245.433659][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 245.447014][ T6838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.462321][ T6838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.514570][ T6838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.523512][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.530466][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.558108][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.573321][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.580428][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.607932][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.637233][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.653068][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.748003][ T6846] device hsr_slave_0 entered promiscuous mode [ 245.757500][ T6846] device hsr_slave_1 entered promiscuous mode [ 245.764969][ T6846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.772501][ T6846] Cannot create hsr debugfs directory [ 245.784302][ T6848] team0: Port device team_slave_0 added [ 245.850747][ T6848] team0: Port device team_slave_1 added [ 245.867359][ T6840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.907632][ T6840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.958636][ T6840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.985032][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.991986][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.022940][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.050152][ T6840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.072898][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.082290][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.110342][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.191068][ T6848] device hsr_slave_0 entered promiscuous mode [ 246.199202][ T6848] device hsr_slave_1 entered promiscuous mode [ 246.207077][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.215340][ T6848] Cannot create hsr debugfs directory [ 246.260698][ T6842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.274222][ T6842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.322752][ T6842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.382105][ T6842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.469592][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.478013][ T6844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.498416][ T6844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.516938][ T6844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.547877][ T6844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.558378][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 246.567785][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.581805][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.597427][ T6838] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.620348][ T6846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.629938][ T6846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.679479][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.689767][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.698779][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.706019][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.723441][ T2464] Bluetooth: hci1: command 0x041b tx timeout [ 246.730591][ T6846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.746510][ T6846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.768532][ T6848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.778868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.790833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.799975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.809322][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.816448][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.825583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.834553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.868409][ T6848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.878035][ T6848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.895632][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.905549][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.915130][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.924487][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.933733][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.950188][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.957309][ T2574] Bluetooth: hci2: command 0x041b tx timeout [ 246.980447][ T6848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.994513][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.002818][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.016099][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.026091][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.037490][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.060247][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.090695][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.098754][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.113273][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 247.144976][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.158404][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.168108][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.175253][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.188864][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.199514][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.208372][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.215531][ T2574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.225376][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.256786][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.270565][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.343622][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.352702][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.353378][ T7420] Bluetooth: hci4: command 0x041b tx timeout [ 247.368414][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.379952][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.390325][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.401931][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.412343][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.423942][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.432106][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.449168][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.468874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.479796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.487502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.512443][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.513349][ T2574] Bluetooth: hci5: command 0x041b tx timeout [ 247.532061][ T6840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.544277][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.554642][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.565820][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.574198][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.582645][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.592163][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.599309][ T2464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.607705][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.616582][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.625561][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.632609][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.645259][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.657916][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.697137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.706604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.738820][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.762616][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.770956][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.782706][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.791227][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.799025][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.808501][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.837644][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.847055][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.861464][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.871002][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.881996][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.891146][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.902820][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.912035][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.926524][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.954178][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.962739][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.977961][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.985067][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.998576][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.007169][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.015745][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.022786][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.030650][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.039506][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.048341][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.055463][ T2574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.063441][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.075927][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.084588][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.092510][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.104946][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.157392][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.168929][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.179094][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.186363][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.194162][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.202599][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.211705][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.220677][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.228878][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.237122][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.245889][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.254859][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.264043][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.272244][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.288187][ T6846] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.315264][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.325377][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.336041][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.359755][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.384014][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.391809][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.410632][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.420500][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.429661][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.438575][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.448210][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.457447][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.464566][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.472233][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.481651][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.493004][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.500907][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.523753][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.531672][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.557360][ T6838] device veth0_vlan entered promiscuous mode [ 248.585916][ T6840] device veth0_vlan entered promiscuous mode [ 248.599662][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.624233][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.632621][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.632911][ T2574] Bluetooth: hci0: command 0x040f tx timeout [ 248.649358][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.658202][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.667272][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.676047][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.685330][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.694328][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.703687][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.711984][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.719086][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.741760][ T6848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.757028][ T6848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.776659][ T6838] device veth1_vlan entered promiscuous mode [ 248.786908][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.794401][ T2574] Bluetooth: hci1: command 0x040f tx timeout [ 248.800720][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.812316][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.824555][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.832216][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.845004][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.856005][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.867622][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.876852][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.885287][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.894156][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.901555][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.909446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.928594][ T6840] device veth1_vlan entered promiscuous mode [ 248.958674][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.994037][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.002071][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.011005][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.021021][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.029815][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.039483][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.048940][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.056845][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.065735][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.074377][ T7420] Bluetooth: hci2: command 0x040f tx timeout [ 249.098889][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.108174][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.117490][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.151106][ T6846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.164398][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.189824][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.193122][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 249.207216][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.215493][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.223649][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.232131][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.240845][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.249735][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.262825][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.306693][ T6840] device veth0_macvtap entered promiscuous mode [ 249.317686][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.332142][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.340959][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.356465][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.368048][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.378245][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.390082][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.399858][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.410819][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.422272][ T6838] device veth0_macvtap entered promiscuous mode [ 249.440961][ T2574] Bluetooth: hci4: command 0x040f tx timeout [ 249.458128][ T6840] device veth1_macvtap entered promiscuous mode [ 249.472485][ T6842] device veth0_vlan entered promiscuous mode [ 249.496463][ T6838] device veth1_macvtap entered promiscuous mode [ 249.505637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.516252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.525225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.534445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.544100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.553992][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.605026][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.618977][ T2574] Bluetooth: hci5: command 0x040f tx timeout [ 249.630916][ T6842] device veth1_vlan entered promiscuous mode [ 249.646430][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.657782][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.669667][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.679090][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.689925][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.701675][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.710563][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.719360][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.728217][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.737125][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.766323][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.786167][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.800084][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.813655][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.828747][ T6844] device veth0_vlan entered promiscuous mode [ 249.843691][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.856624][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.869207][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.883276][ T6840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.891964][ T6840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.900896][ T6840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.911183][ T6840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.925511][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.938467][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.948512][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.958178][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.981773][ T6844] device veth1_vlan entered promiscuous mode [ 249.990997][ T6838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.000626][ T6838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.019624][ T6838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.028385][ T6838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.057636][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.065904][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.074754][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.082966][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.094981][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.108976][ T6842] device veth0_macvtap entered promiscuous mode [ 250.136526][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.146718][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.156175][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.168688][ T6842] device veth1_macvtap entered promiscuous mode [ 250.187916][ T6848] device veth0_vlan entered promiscuous mode [ 250.197386][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.206766][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.215495][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.263320][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.271039][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.279492][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.288658][ T2574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.316661][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.328436][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.340752][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.351280][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.364032][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.372003][ T6848] device veth1_vlan entered promiscuous mode [ 250.388033][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.408188][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.434139][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.443029][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.451687][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.452955][ C0] hrtimer: interrupt took 33766 ns [ 250.461101][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.473918][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.486246][ T6846] device veth0_vlan entered promiscuous mode [ 250.528435][ T28] audit: type=1804 audit(1599091383.363:2): pid=8161 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir817054164/syzkaller.sJt7qr/0/file0" dev="sda1" ino=15740 res=1 errno=0 [ 250.558070][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.568154][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.578504][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.593505][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.616470][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.628415][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.643989][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.659753][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.700356][ T6844] device veth0_macvtap entered promiscuous mode [ 250.713815][ T7420] Bluetooth: hci0: command 0x0419 tx timeout [ 250.738835][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.752439][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.768176][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.802243][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.814090][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.859384][ T6842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.873953][ T7420] Bluetooth: hci1: command 0x0419 tx timeout [ 250.894628][ T6842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.923354][ T6842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.955298][ T6842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.004424][ T6848] device veth0_macvtap entered promiscuous mode [ 251.032003][ T6846] device veth1_vlan entered promiscuous mode [ 251.055666][ T6844] device veth1_macvtap entered promiscuous mode [ 251.096957][ T6848] device veth1_macvtap entered promiscuous mode [ 251.118229][ T2574] Bluetooth: hci2: command 0x0419 tx timeout [ 251.170317][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.190883][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.203653][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.217608][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.228484][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.265667][ T28] audit: type=1804 audit(1599091384.103:3): pid=8161 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir817054164/syzkaller.sJt7qr/0/file0" dev="sda1" ino=15740 res=1 errno=0 [ 251.289739][ T7420] Bluetooth: hci3: command 0x0419 tx timeout 00:03:04 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x2, 0x1, 0x8, 0x2, 0xf94, 0x80000001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x1c575) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket(0x4, 0x1, 0x100) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@delchain={0x24, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4000}}}, 0x24}, 0x8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'batadv_slave_0\x00', {}, 0xbcbe}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r6, 0x0, 0x58, 0x1, 0x3f, 0x0, @ipv4={[], [], @rand_addr=0x64010102}, @mcast1, 0x80, 0x8, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250d00000018000180140002006272696467655f736c6176655f3100000c00018008000300030000002000018008000100", @ANYBLOB, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468305f6d6163767461700000200860000002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="3400018014000200766c616e3000000000000000000000000800030001000000140002006d6163766c616e31000000000000000088000180080001", @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x80) [ 251.345717][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.379317][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.418121][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.457496][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.493858][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 251.504682][ T28] audit: type=1804 audit(1599091384.333:4): pid=8179 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir817054164/syzkaller.sJt7qr/1/file0" dev="sda1" ino=15752 res=1 errno=0 [ 251.512804][ T2574] Bluetooth: hci4: command 0x0419 tx timeout [ 251.544158][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.569817][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.636183][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.669353][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.680602][ T2574] Bluetooth: hci5: command 0x0419 tx timeout [ 251.687093][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.697707][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.722465][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 251.748258][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.776927][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.814519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.835613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.861069][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.889277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.914739][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.938733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.968630][ T6846] device veth0_macvtap entered promiscuous mode [ 251.996736][ T6844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.024951][ T6844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 00:03:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2750], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 252.050668][ T6844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.100623][ T6844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.136972][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.157525][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.172202][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.194987][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.232253][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.302142][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:03:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) [ 252.344427][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 252.399405][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:03:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FICLONERANGE(r0, 0xc020662a, &(0x7f0000000000)) [ 252.483524][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.504319][ T6846] device veth1_macvtap entered promiscuous mode 00:03:05 executing program 1: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0xc000, 0x28120001) [ 252.546993][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.562265][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.585205][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.603059][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.631568][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.668217][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.692982][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.717564][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.741713][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.764764][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.786111][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 252.808178][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:03:05 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c0a, 0xffffffffffffffff) [ 252.848574][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.881008][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.896664][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.945485][ T6848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.988437][ T6848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.013672][ T6848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.046344][ T6848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.092934][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.111065][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.142746][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.162041][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.179813][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.190695][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.209065][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.231021][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.241786][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.261100][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.294239][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.353513][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.382847][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.415243][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.462249][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.472118][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.495849][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.511615][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.558690][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.601611][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.632290][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.668435][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.690702][ T6846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 253.720016][ T6846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.764008][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.813014][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.821760][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.845550][ T6846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.892361][ T6846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.901069][ T6846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.927376][ T6846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.037784][ T8220] IPVS: ftp: loaded support on port[0] = 21 [ 254.320149][ T8220] IPVS: ftp: loaded support on port[0] = 21 [ 254.539099][ T154] tipc: TX() has been purged, node left! 00:03:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x8008551d, &(0x7f0000000200)=0xd5c) 00:03:09 executing program 2: r0 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup3(r0, r1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0xfffffffd}}, 0x2e) 00:03:09 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000557000/0x3000)=nil, &(0x7f0000556000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r2, 0x0, 0x2c80, 0x1, 0x0, 0x0) 00:03:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:03:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x4b, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @private1}}}, 0x88) 00:03:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0xfffffb07, 0x4) 00:03:10 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000001980)=""/4117, 0x389, 0x40000037, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x1}, 0x1, 0x0, 0x0, 0x40081}, 0x0) socket$inet6(0x10, 0x4, 0x9) sendto$inet6(r0, &(0x7f0000000300)="1ba0000010001d0200fdc5cbdd041d8e8280030000dd00000001a7960fab0fc8da78031c66fbedf2ab62a460b08f00003f71aced466b464a434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x71, 0x240040d0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8004, 0x4) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e25, @empty}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='lo\x00', 0x5, 0xb7c5, 0xe77a}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @private}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) writev(r3, &(0x7f0000001940)=[{&(0x7f0000000040)="dee2f34ed0", 0x5}, {0x0}], 0x2) 00:03:10 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x6, "705e1c887bd10c0dff9e8cbfddc0127d440504", 0x7, 0x8}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x84}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1a404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}}) write$9p(r0, &(0x7f0000001400)="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", 0x600) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000001c0)={0x3, 0x1, 0x19, 0x1e, 0x128, &(0x7f0000000c40)}) sendfile(r0, r1, 0x0, 0x1c542) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="6120c66a1cae8a56c3fddfccfb2f", 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:03:10 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 00:03:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:03:10 executing program 0: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x5b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 257.405485][ T8293] IPVS: ftp: loaded support on port[0] = 21 [ 257.451097][ T28] audit: type=1804 audit(1599091390.284:5): pid=8294 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir297501882/syzkaller.ecPBoU/2/file0" dev="sda1" ino=15787 res=1 errno=0 00:03:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getxattr(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="77a18680cf07aec1010000000000e3ffc9fae0e6b27dd9cfb41c7851060054a8aee79c5037174a3270e7ff570e14a510bbe39b8775e8c87ec4dfae39e2f5e710c00e31d70b91eacf180c3e59b80be0691287d544fbdec4b58431ed3f41e964abb7f0de490aff4380571a393aaf097a69db9c5f3d17d4309838183ba75527ac550917e4f53f7ba5a98726ce1773583de7e377295bef6cdaa85e24ecb049b0fc7e665340e4b001da174a535cb16f7804309f00"], 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 258.156093][ T28] audit: type=1804 audit(1599091390.984:6): pid=8299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir297501882/syzkaller.ecPBoU/2/file0" dev="sda1" ino=15787 res=1 errno=0 00:03:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x10000015, 0x5, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x24}}, 0x0) 00:03:11 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x339}, 0x0) [ 261.518522][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.526362][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.661747][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.061759][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.848700][ T8298] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.857820][ T8298] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.868917][ T8298] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.878180][ T8298] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.561912][ T8298] syz-executor.5 (8298) used greatest stack depth: 22792 bytes left [ 270.643926][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.653412][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.661406][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.670281][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:03:25 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d21f076040000000000109022400010000000009040000010e010000090581"], 0x0) 00:03:26 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r0, 0x531, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x0, 0x1}}}}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 00:03:26 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10) sendto(r0, &(0x7f00000000c0)="00b8", 0x2, 0x48840, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000001c0)="0300", 0xff35, 0x0, 0x0, 0x0) [ 273.199771][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.230792][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.264243][ T8341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:03:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x94) [ 273.480290][ T7792] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 273.840677][ T7792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.862166][ T7792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.879411][ T7792] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.40 [ 273.906065][ T7792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.951625][ T7792] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 274.040015][ T28] audit: type=1804 audit(1599091406.866:7): pid=8365 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir461318015/syzkaller.PDoh18/3/cgroup.controllers" dev="sda1" ino=15798 res=1 errno=0 [ 274.591539][ T28] audit: type=1804 audit(1599091407.426:8): pid=8366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir461318015/syzkaller.PDoh18/3/cgroup.controllers" dev="sda1" ino=15798 res=1 errno=0 [ 274.646083][ T28] audit: type=1800 audit(1599091407.476:9): pid=8365 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15798 res=0 errno=0 [ 274.684653][ T28] audit: type=1800 audit(1599091407.476:10): pid=8366 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15798 res=0 errno=0 [ 276.442606][ T7420] usb 6-1: USB disconnect, device number 2 [ 277.254943][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.262331][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.330268][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.740105][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.471879][ T8341] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.480833][ T8341] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.492061][ T8341] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.501290][ T8341] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.301738][ T154] tipc: TX() has been purged, node left! 00:03:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000003) 00:03:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4b, 0x2f}}) 00:03:39 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 00:03:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 00:03:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/248, 0x6}], 0xf8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000072000032eb000000000000000000e600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "74e56d7786f1217d576fa50a30d2248247825b"}) 00:03:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x3b, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 00:03:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000400", @ANYRES16=0x0, @ANYBLOB="000000000b00000000000300000014000700ff02"], 0x28}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="68020000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="f0000000000000010000ffffffffffff0000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300200000000000000003000000000000000000000000000000000002000000960000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000001301140073686131"], 0x268}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 00:03:39 executing program 5: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000040)) r4 = dup(r0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000140)='ro\x00', 0x0, 0x0) 00:03:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x2, {0x0, 0x2, 0x8}, 0x0, 0x0, r7, 0x1ff, 0x8001, 0x30b, 0xfff, 0x8, 0x7, 0x2, 0x6, 0x5, 0x401, 0x62, 0x320a, 0x0, 0x20, 0x6}}, 0xa0) 00:03:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x28520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r4 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r4, 0x29, 0x19, &(0x7f0000000300)={0x120, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 00:03:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone3(&(0x7f0000000380)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {}, &(0x7f0000000100)=""/240, 0xf0, &(0x7f0000000200)=""/12, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0xffffffffffffff44) 00:03:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x45) 00:03:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3f000000009caf1701d25c2fd6d42bce84c2c938b5eae719fd6321452d791cc001040000862bd395fea6432d69e5cc27d790ff298f52e4be0721915e61d01591d9a3c60b47b032e3b6e85e28ac2ce6327903c0b0a055dd23941581344ab5e79a98bfb47d4b5f93b62eacb053514353d636b5e3eb82b1ae6bec87fa8e915bc5bf86d6a65130236df518e44d76c1f96a84e06a502fdfccdcd6a5797b8b502db28f8991a5e1b98db6f3bccc9930eea832c2778fb0", 0xbf}], 0x4, 0x2) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:03:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x5f]}}, &(0x7f0000000140)=""/194, 0x3b, 0xc2, 0x1}, 0x20) 00:03:40 executing program 0: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/44, 0x30}], 0x13}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[], 0xfffffd6d) [ 287.321402][ T8446] ptrace attach of "/root/syz-executor.2"[8445] was attempted by "/root/syz-executor.2"[8446] 00:03:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = inotify_init() r5 = open(&(0x7f00000000c0)='./bus\x00', 0x2481c1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x0, 0x5, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x0, 0x0, 0x636}}) inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r6, &(0x7f00000000c0)=ANY=[], 0x1) sendfile(r6, r6, &(0x7f0000000200), 0xaa4) 00:03:40 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 00:03:40 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:03:40 executing program 5: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="02010f0000000a000000ff45ac0000ffffffbf00e931190000000000000680ffffffbf000000e100e2ff87770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) [ 287.660782][ T8459] ptrace attach of "/root/syz-executor.1"[8457] was attempted by "/root/syz-executor.1"[8459] 00:03:40 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = dup(r0) write$P9_RWALK(r1, &(0x7f0000000200)=ANY=[], 0x4a) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 00:03:40 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x4}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:03:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x9c) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/82) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf25150000007e8be675821d2dcfd677605f8e2642c9825c5a3ce11770bdd23362d2332c13309ae5dea5042357d2405a5820ceee6f0f32", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a000600aaaaaaaaaabb000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x4810) fstat(r0, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2f80000, 0x1) preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) socket(0x11, 0x2, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x10001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32, @ANYBLOB="000000a0e770b3c86a2b5d0100", @ANYRES16], 0x2c}}, 0x0) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 288.063570][ T28] audit: type=1804 audit(1599091420.897:11): pid=8475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441823019/syzkaller.3xqPN8/5/bus" dev="sda1" ino=15814 res=1 errno=0 00:03:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x34}}, 0x0) [ 288.224295][ T28] audit: type=1804 audit(1599091420.937:12): pid=8475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441823019/syzkaller.3xqPN8/5/bus" dev="sda1" ino=15814 res=1 errno=0 00:03:41 executing program 0: ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) stat(0x0, &(0x7f00000003c0)) sendfile(r0, r1, 0x0, 0x1c542) 00:03:41 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000ccc600000079eb0000000000009500000000de702239344dc0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x109, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) 00:03:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x3, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 00:03:41 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x1000000000000012}, &(0x7f00000002c0)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) tkill(r2, 0x15) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) 00:03:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00006975c2d67f2b4108ab000000000000050021000000000004001400"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xfc5, 0x6}) [ 288.557002][ T28] audit: type=1804 audit(1599091421.377:13): pid=8486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir461318015/syzkaller.PDoh18/8/file0" dev="sda1" ino=15771 res=1 errno=0 [ 288.593811][ T8491] ptrace attach of "/root/syz-executor.3"[8490] was attempted by "/root/syz-executor.3"[8491] 00:03:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x110}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:41 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x4}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 288.801947][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:41 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xffffffffffffffd6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 00:03:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socket$inet_udp(0x2, 0x2, 0x0) 00:03:42 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) [ 289.249236][ T28] audit: type=1804 audit(1599091422.077:14): pid=8494 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir461318015/syzkaller.PDoh18/8/file0" dev="sda1" ino=15771 res=1 errno=0 00:03:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001b80)=""/141, 0x8d}], 0x1, &(0x7f0000000600)=""/136, 0x88}, 0x3}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f00000002c0)=""/26, 0x1a}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/199, 0xc7}, 0x2}], 0x3, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740e", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) 00:03:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x38, [@dev]}, @lsrr={0x83, 0x3, 0xd5}]}}}}}}, 0x0) 00:03:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oi\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x4) [ 289.598274][ T8536] IPVS: ftp: loaded support on port[0] = 21 [ 289.617243][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.793301][ T8539] FAT-fs (loop4): invalid media value (0x00) [ 289.799847][ T8539] FAT-fs (loop4): Can't find a valid FAT filesystem 00:03:42 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='4\xac\xd5rcO\b\xc4ut/eve\x94\xa1m\x1e\x00\xd2+\xea\x88\xc2\x83\a\x97\x04\x90\xb6r\xc7\xf9\x8d\xcb\xf1\x9f\xd7\xe3\xe6\x13eds)C\x98\xf20X\x13\xb3o\b\xdeF\x98\xa1\xd0\xc9\xcf\xc61\xd8\xc0\xa9\x02v\xa8\xde\x8c\xe7X\xbe\xdf3\"!\x8e\xf4Q\xc8=k\xbd\xf4\x11\v\xae\x01\xf1)\xdd\xb5!\xfc\t\xc0mw\xc0\xfa\xba\x00\xb0\"\x8ca&LL\x85FsY\xf9\xa6\x1ck@\xa6\x10\xe6\xdd\xc1U\x9e\x8c\xe6?\xadl\xab\'\xaa\xd0\b+x!]\xd8\x0e\xf5\xe8\x92\xf7\xfe\xa3\xc1(\xafz\xe7\xf3b\xa3', 0x0) setresuid(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 00:03:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x84000) [ 289.954400][ T8569] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/3' not defined. 00:03:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r5, 0x12fc8ad0283830c7, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0xf618000000000000}, 0x0) 00:03:43 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="230000002e0007031dfffd946fa2830020200a0009000000000085680c1ba3a20400ff", 0x23}], 0x1}, 0x0) 00:03:43 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x3fd, &(0x7f0000000400)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000380)={0xffffff7f, 0x400000000000, 0x8, 0x1, 0x0, r0, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="9f208b230138a64d36", 0x9}]) 00:03:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000100)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oi\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x4) 00:03:43 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x30000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x5, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x3, 0x0, 0x64, './bus\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 00:03:43 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x21, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800000, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0x1) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(r1, 0x2, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)='b', 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x108000, 0x3, 0x0, r4, 0x0, 0x1f00}]) 00:03:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00006975c2d67f2b4108ab000000000000050021000000000004001400"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0xfc5, 0x6}) [ 291.071502][ T8600] xt_bpf: check failed: parse error [ 291.072337][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:44 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_STATFS(r1, &(0x7f00000022c0)={0x60}, 0x60) dup2(r0, r1) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) 00:03:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000002000071201887d2466ff1a7000000000000009500000000000000cf4889dc143f5715c2fbbec2d7a0ead5cd94c3c03199d626e60650bf3d858cf46f7008733d59c69d8c9017cdb0da6c0424"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1ff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) syz_emit_ethernet(0x46, 0x0, 0x0) 00:03:44 executing program 5: pipe2(&(0x7f00000001c0), 0x86000) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004000000040010"], 0x18}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32]) mkdir(&(0x7f0000000000)='./file0\x00', 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f646545009f082d10"], 0x0, 0x0, 0x100c10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x2, 0x4, 0x0, 0x80}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) 00:03:44 executing program 2: unshare(0x44000400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40104593, 0x0) 00:03:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x66}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:03:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 291.520339][ T8624] IPVS: ftp: loaded support on port[0] = 21 00:03:44 executing program 5: pipe2(&(0x7f00000001c0), 0x86000) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004000000040010"], 0x18}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32]) mkdir(&(0x7f0000000000)='./file0\x00', 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f646545009f082d10"], 0x0, 0x0, 0x100c10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x2, 0x4, 0x0, 0x80}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) 00:03:44 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) rt_sigsuspend(&(0x7f0000000080), 0x8) [ 291.752755][ T28] audit: type=1804 audit(1599091424.587:15): pid=8658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441823019/syzkaller.3xqPN8/13/bus" dev="sda1" ino=15783 res=1 errno=0 [ 291.884498][ T8624] IPVS: ftp: loaded support on port[0] = 21 [ 291.930230][ T28] audit: type=1804 audit(1599091424.657:16): pid=8660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441823019/syzkaller.3xqPN8/13/bus" dev="sda1" ino=15783 res=1 errno=0 00:03:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}]}, 0x2c}}, 0x0) [ 292.266778][ T28] audit: type=1800 audit(1599091424.817:17): pid=8664 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15834 res=0 errno=0 00:03:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x38}], 0x1, 0x0) 00:03:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 292.653658][ T28] audit: type=1800 audit(1599091425.487:18): pid=8664 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15834 res=0 errno=0 00:03:45 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) 00:03:45 executing program 5: pipe2(&(0x7f00000001c0), 0x86000) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004000000040010"], 0x18}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32]) mkdir(&(0x7f0000000000)='./file0\x00', 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f646545009f082d10"], 0x0, 0x0, 0x100c10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x2, 0x4, 0x0, 0x80}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) 00:03:45 executing program 1: unshare(0x4020400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, 0x0, 0x0, 0x0) 00:03:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e", 0x60}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 292.706160][ T8678] ptrace attach of "/root/syz-executor.0"[8677] was attempted by "/root/syz-executor.0"[8678] [ 292.866266][ T8687] ptrace attach of "/root/syz-executor.0"[8685] was attempted by "/root/syz-executor.0"[8687] [ 293.133279][ T154] tipc: TX() has been purged, node left! [ 293.143823][ T154] tipc: TX() has been purged, node left! [ 293.944278][ T154] device hsr_slave_0 left promiscuous mode [ 293.970148][ T154] device hsr_slave_1 left promiscuous mode [ 293.989255][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.031016][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.062305][ T154] device bridge_slave_1 left promiscuous mode [ 294.089252][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.101904][ T154] device bridge_slave_0 left promiscuous mode [ 294.108143][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.517793][ T154] team0 (unregistering): Port device team_slave_1 removed [ 294.631796][ T154] team0 (unregistering): Port device team_slave_0 removed [ 294.721647][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.762169][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.964004][ T154] bond0 (unregistering): Released all slaves 00:03:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getpgid(r0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 00:03:48 executing program 0: setresuid(0xee01, 0xee01, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 00:03:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000340)={@empty, 0x67488060, 0x1, 0x0, 0x0, 0xb0e, 0xbc26}, &(0x7f0000000480)=0x20) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="2d29384d3c8d4287688575ee6a8ddf67994018ca0deb6e69058c43aaeaedcf20f638f348bfe5c112918a4db8831a77e104ff64f4a78311219858d7d12f57f046b6f61194f5addb0d9729967d124f3f389512fe59036854aeb259e59fac7980b0faeb068eaf6a6bc2fd46b9d1585f41148232581daffcf1", @ANYBLOB="915f2dacc6b4e2ebd17ba204e35964b1ea39aa30e4731e7189c640480b1bfc922c5c106d1ed5a70c73d457e410d625b33c656adef69337f188ada6b55c73547ccb3620061ffe482f5516a7bbce2bb458bf005eaf0f2555f8e1c02b3e0a554e5a502b1278b4300e3e616871c5e7b78018c8653b4962a3d727f869bcc7756d552ee1fd7a04dc85cc8862a9ebf23e1d1cf836dbc62e35329136b11e01bcbed6d0896080be877bde18d4f759f598984fef95b8d14b5ca0129a003053173fb5874cf22f3332044a733a17ecabb979c965105e8c2cae830a323e71c5867b6edddf555035"], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1a008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:03:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, 0x10000015, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:03:48 executing program 4: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x15}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r1, 0x0, 0x12f}]) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:03:49 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x11d, &(0x7f0000000040)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x9d2c, 0x4000000205}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x40000}]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 00:03:49 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:03:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000340)={@empty, 0x67488060, 0x1, 0x0, 0x0, 0xb0e, 0xbc26}, &(0x7f0000000480)=0x20) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="2d29384d3c8d4287688575ee6a8ddf67994018ca0deb6e69058c43aaeaedcf20f638f348bfe5c112918a4db8831a77e104ff64f4a78311219858d7d12f57f046b6f61194f5addb0d9729967d124f3f389512fe59036854aeb259e59fac7980b0faeb068eaf6a6bc2fd46b9d1585f41148232581daffcf1", @ANYBLOB="915f2dacc6b4e2ebd17ba204e35964b1ea39aa30e4731e7189c640480b1bfc922c5c106d1ed5a70c73d457e410d625b33c656adef69337f188ada6b55c73547ccb3620061ffe482f5516a7bbce2bb458bf005eaf0f2555f8e1c02b3e0a554e5a502b1278b4300e3e616871c5e7b78018c8653b4962a3d727f869bcc7756d552ee1fd7a04dc85cc8862a9ebf23e1d1cf836dbc62e35329136b11e01bcbed6d0896080be877bde18d4f759f598984fef95b8d14b5ca0129a003053173fb5874cf22f3332044a733a17ecabb979c965105e8c2cae830a323e71c5867b6edddf555035"], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1a008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 296.264732][ T28] audit: type=1804 audit(1599091429.098:19): pid=8753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776660813/syzkaller.Uw1wSE/14/bus" dev="sda1" ino=15843 res=1 errno=0 00:03:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000480)=""/40, 0x5ba8) [ 296.472949][ T8762] ptrace attach of "/root/syz-executor.0"[8761] was attempted by "/root/syz-executor.0"[8762] [ 296.566774][ T28] audit: type=1804 audit(1599091429.148:20): pid=8754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir776660813/syzkaller.Uw1wSE/14/bus" dev="sda1" ino=15843 res=1 errno=0 [ 298.887163][ T154] tipc: TX() has been purged, node left! [ 300.604391][ T8789] IPVS: ftp: loaded support on port[0] = 21 [ 300.814678][ T8789] chnl_net:caif_netlink_parms(): no params data found [ 300.874856][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.882266][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.891234][ T8789] device bridge_slave_0 entered promiscuous mode [ 300.901037][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.908287][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.916112][ T8789] device bridge_slave_1 entered promiscuous mode [ 300.942254][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.954304][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.979745][ T8789] team0: Port device team_slave_0 added [ 300.988026][ T8789] team0: Port device team_slave_1 added [ 301.007099][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.014193][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.040479][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.053955][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.061346][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.087431][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.121742][ T8789] device hsr_slave_0 entered promiscuous mode [ 301.128826][ T8789] device hsr_slave_1 entered promiscuous mode [ 301.135260][ T8789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.143537][ T8789] Cannot create hsr debugfs directory [ 301.232893][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.240010][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.247352][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.254478][ T8789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.310492][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.327155][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.337056][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.346074][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.356455][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 301.370443][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.381698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.391073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.398178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.411241][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.419825][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.426856][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.452481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.469528][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.477362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.500334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.509003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.518344][ T8789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.542519][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.550987][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.564515][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.628565][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.648805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.657079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.665574][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.677607][ T8789] device veth0_vlan entered promiscuous mode [ 301.693665][ T8789] device veth1_vlan entered promiscuous mode [ 301.720316][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.729268][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.737341][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.749265][ T8789] device veth0_macvtap entered promiscuous mode [ 301.759914][ T8789] device veth1_macvtap entered promiscuous mode [ 301.779402][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.792913][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.805176][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.816176][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.826664][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.845480][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.856106][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.866026][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.876525][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.888448][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.896156][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.906245][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.918858][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.931369][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.941546][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.952037][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.962044][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.972495][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.982409][ T8789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.994517][ T8789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.005690][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.013999][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.023621][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:03:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000800000000000002726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000100000000000000000000000000000000ee00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000500000000000400000000000000000000000000000070009000000000000000000000000000000000000000010020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 00:03:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be07d787ff889443ab36a0467879316bfc6d21915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490f", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bind(r3, 0x0, 0x0) 00:03:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014093b08ab12a190eb09000000010902240001000000000904410002ff5d810009050f1f000000000009058303ba"], 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 00:03:55 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [{}]}, 0x2c, 0x0) 00:03:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7, 0x7, 0x5, 0x1}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x7, 'veth1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 00:03:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0090e0f38c28a447742606"]) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 00:03:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/46, 0x2e}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/27, 0x1b}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/217, 0xd9}, {0x0}, {0x0}], 0x5, &(0x7f0000001100)=""/102, 0x66}, 0x2}, {{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002500)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x2}}], 0x6, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x800, 0xfffffffffffffffd}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000002840)=ANY=[@ANYRESDEC, @ANYBLOB="1a0019ae085e105c58d9058a00006a56e637aa4ae5a38d8d54d8254114258100002306ed8d36487c64273fc11ba6d51e75b6a5820f799bcf5ed0c3b7a28edec8df93527ba9cb8f87fb7f85b711c3"]}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:03:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0090e0f38c28a447742606"]) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) [ 302.497993][ T8145] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 302.737874][ T8145] usb 5-1: Using ep0 maxpacket: 8 00:03:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0090e0f38c28a447742606"]) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) [ 302.858226][ T8145] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 302.875722][ T8145] usb 5-1: config 0 has no interface number 0 [ 302.893738][ T8145] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 302.915454][ T8145] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 302.926702][ T8145] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.946681][ T8145] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 302.976451][ T8145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.002723][ T8145] usbip-host 5-1: 5-1 is not in match_busid table... skip! 00:03:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) 00:03:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x228, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1c24000}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180), 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@private1, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x3b}, {0xfffffffffffffffc}, {0xc88, 0x0, 0x3}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@remote, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e23, 0xc75, @mcast2, 0x80000001}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="47713136af4c0609fda6979c8ce656cdef31cfc073375989dd9c7028820adcecf0b74cd8d5851f835dc62233f77a5e2a301c9d62ac368308a16888e7b0f0f9ce4225986b7ad82601029a2a9324562e2b3880e53130badf2ae7938d374bad9e1aa1bad7834a8e0aa821ab30b2ad651488c3383f57344206deec09208208226add8ddd6a744ca66d029658cb64a257d4cb", 0x90}, {&(0x7f00000005c0)="4fa46343bfa6d9d6efa97d34cfe1774e2d451142da14fbea5d895a84692e90cbfb31c7aae86fe1dd53c68456b84c950ab51bd2f43dc6894b99729d4c49281bf2b610fadb649c8e5730feba39e0f98e7fec6d79498c1686ef9229", 0x5a}, {&(0x7f0000000640)="397ffe426d7278475462bbd7ef4082728817268626891c83efa6e462694c295f3dd5e7481abb547b39b4d2d3f77e7bc637b7dea923adea11110a077e8c35c54884ef7b14c3b9ce44e9c9c6221886536d7cf537977be12a0802d09b2123e0d9c34c9d71e33bf9cc5ff81b78f028a5d3ae05d1b9a6621e11f95532dcbfb2b8de99977e7460ba92426eed9821ec39c27b8ebc1378b0f856a99423f3a790ab98b9165f9be99330d77a44567ea89433e0de560302ede1703836faae717cb850121929bfcf5b718fea6b764b9e87095a3bb1c3b04e579f68c9a4b3ec3a530fe9c3937bbb3961a1dec78838", 0xe8}], 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0xff0}}, {{&(0x7f0000000780)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x3f, @remote, 0x1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000006b80)=ANY=[], 0x1490}}, {{&(0x7f0000005080)=@in6={0xa, 0x4e20, 0x9773, @private1={0xfc, 0x1, [], 0x1}, 0x8}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1233bc3af40968d0e801d95b724303a7c86c329b4be79c19ad34b8bdf40aaeee9a8f872e77d4b17d15351dcab18a2aba4f550ccb68700e5acef48eb47cfaf19841253d08eaffeb", 0x47}, {&(0x7f0000005180)="efe1e1b266d75b910bc333c117d603b71b81eea9fcdf5a5f56c3948bfe166521e1be683cba5f5d8eb8ce2b514b06836db672cfdf007503a2d5aa4a7db3cabd32355083d186dc4ec83f90ae26961416948960123aea24ad6f073455184f900ede541d538971bd358fc5c85c90b265b49dd9ddca9de78a93064d290a335d09e422ce9f", 0x82}, {&(0x7f0000005240)="60065e8cbb71267ed7fb6ca095740de9d61af79d5613afc1ffe1fe92a2b29529fcf635a60d1ce64a5044fe1a40696324e5337fa80196c263ae1343a696", 0x3d}], 0x3, &(0x7f00000052c0)=[{0x110, 0x10a, 0x101, "0461e8e393869a527f9c3129ca613a7d3ca708f78df845233ffa93f51a1710f7c48c8d5dd94597a28f86cbe9895243d0c9c7763df17177c2ab69a26362e0c3b0ed387d772d8389f815fc2c22af99bef103e8784f5c50c27ba5b8a4685f2a38ff9450b45bcddfa6b0bbeb757a1a6f86455e5d49c0dd3091ad02d7c920198260698440aa555143601255f284073afbb13962a86244b7516d421c712c4527d013e054cb19ce64d3b9b94a101c2ce4bec77ee65111efa5a2f6cc475650dfe19bcb3301757018a5d934ad3b78ec437342cde0e4e5fa3b33f1e92ff5b77a34969251d59463b12b7dacf0c712f4bd6c106791a1b515d076f82495133127c5093e"}], 0x110}}, {{&(0x7f0000005400)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x40, "457ddbec9a8d45980335126b97e9179eec63ad716192566949434b8718520f6e4c9cbe118c80bd4f242eb2b6b5d2734b63ba1e23303b24409ab52444fd9946", 0x3f}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)="7a6a217e944702b11e7b6fab22ec71182cfad0480ffd3bc2584ee102026d999701c363f59c71414a36a781b0e24e244617095a0bf21632270ca4419f17a830d6a77042aa49b1d2499086792bf38b87e59b5c22af51743a4dc65286f24877a117c50a1b9d13d11cb7d3fc4c676d19c55c620f005a07cc2ef21fcf1ee8a3f81e850e070b4274e66f281ed56e600c72b924a3a72320ae406e6b53fc5b0aff72be1e6585cfed618030d9e171ce7fe178ae494c65d0ba519db3e21111658a2dd602776e061e8e58d81f8d81c48a3ccda9432f51e2395b9c07a316d4857889e9f145e1497b0123b1f333582462647e095dac96fc81", 0xf2}], 0x1}}], 0x5, 0x2000ff01) socket$inet6(0xa, 0x4, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) [ 303.141451][ T154] tipc: TX() has been purged, node left! 00:03:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0090e0f38c28a447742606"]) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) 00:03:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{}]}, @func_proto, @enum]}}, &(0x7f0000003580)=""/4096, 0x46, 0x1000, 0x1041}, 0x20) 00:03:58 executing program 0: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x1ff) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x31, 0x8, 0x1f2, 0x7, 0xa, "85759fb0abebd1a2"}) 00:03:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:03:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:03:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x1, 0x8000, 0x9}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 00:03:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x14, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000000)=@tcp=r1}, 0x20) [ 305.206725][ T8162] usb 5-1: USB disconnect, device number 2 00:03:58 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x10020, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@context={'context', 0x3d, 'system_u'}}]}}) 00:03:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) pipe2(&(0x7f0000002a80), 0x0) 00:03:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r0, &(0x7f0000000500)}, 0x20) 00:03:58 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 00:03:58 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001400)=""/216, 0xd0}, {&(0x7f0000000200)=""/4096, 0xfffffe52}, {&(0x7f0000001200)=""/225, 0x58}, {&(0x7f0000001300)=""/222, 0xde}], 0x4, 0x800000, 0x0) 00:03:59 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0xd8, &(0x7f0000000080)=""/216, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 306.116590][ T154] device hsr_slave_0 left promiscuous mode [ 306.161814][ T154] device hsr_slave_1 left promiscuous mode [ 306.185254][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.205448][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.225569][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.236235][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.259617][ T154] device bridge_slave_1 left promiscuous mode [ 306.293727][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.334153][ T154] device bridge_slave_0 left promiscuous mode [ 306.369755][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.413915][ T154] device veth1_macvtap left promiscuous mode [ 306.424408][ T154] device veth0_macvtap left promiscuous mode [ 306.441517][ T154] device veth1_vlan left promiscuous mode [ 306.452413][ T154] device veth0_vlan left promiscuous mode [ 309.267679][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 311.058161][ T154] team0 (unregistering): Port device team_slave_1 removed [ 311.071555][ T154] team0 (unregistering): Port device team_slave_0 removed [ 311.086330][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.103081][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.158170][ T154] bond0 (unregistering): Released all slaves [ 311.214606][ T9122] IPVS: ftp: loaded support on port[0] = 21 [ 311.347855][ T7420] Bluetooth: hci5: command 0x041b tx timeout [ 311.424055][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 311.488515][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.495662][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.504419][ T9122] device bridge_slave_0 entered promiscuous mode [ 311.513929][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.521988][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.530180][ T9122] device bridge_slave_1 entered promiscuous mode [ 311.555273][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.568816][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.598452][ T9122] team0: Port device team_slave_0 added [ 311.608525][ T9122] team0: Port device team_slave_1 added [ 311.631159][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.639107][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.666382][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.680421][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.687476][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.713882][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.761769][ T9122] device hsr_slave_0 entered promiscuous mode [ 311.779124][ T9122] device hsr_slave_1 entered promiscuous mode [ 311.785865][ T9122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.801476][ T9122] Cannot create hsr debugfs directory [ 311.934999][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.942141][ T9122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.949564][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.956755][ T9122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.042166][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.079728][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.095834][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.105059][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.122426][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.137603][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.146089][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.153232][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.183453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.193169][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.200334][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.225043][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.261415][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.271601][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.281707][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.309604][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.327817][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.336327][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.376754][ T9122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.394240][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.404156][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.415692][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.424887][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.453424][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.472382][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.504290][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.620615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.637580][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.684471][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.702553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.716602][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.725206][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.736847][ T9122] device veth0_vlan entered promiscuous mode [ 312.765534][ T9122] device veth1_vlan entered promiscuous mode [ 312.816134][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.826890][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.835327][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.844546][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.858567][ T9122] device veth0_macvtap entered promiscuous mode [ 312.875839][ T9122] device veth1_macvtap entered promiscuous mode [ 312.902867][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.913551][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.931826][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.945017][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.955549][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.968326][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.979716][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 312.990513][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.002458][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.017103][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.025086][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.048440][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.057786][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.070355][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.085594][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.096656][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.108492][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.118955][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.129839][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.140170][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.151095][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.163007][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.172556][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.182895][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:04:06 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) 00:04:06 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001400)=""/216, 0xd0}, {&(0x7f0000000200)=""/4096, 0xfffffe52}, {&(0x7f0000001200)=""/225, 0x58}, {&(0x7f0000001300)=""/222, 0xde}], 0x4, 0x800000, 0x0) 00:04:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x2, 0x0, 0x0, 0x8000000007, 0x114}, 0x95) 00:04:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x3, 0x27fd, 0x1}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000001c0)}, 0x20) 00:04:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 00:04:06 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 00:04:06 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)}], 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000480)=ANY=[], 0x65) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 00:04:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$inet6(0xa, 0x8000000000080001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r3, r5, 0x0) [ 313.427741][ T8144] Bluetooth: hci5: command 0x040f tx timeout 00:04:06 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1a8184c, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000240)=""/167) umount2(&(0x7f0000000200)='./file0\x00', 0xb) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) fcntl$getflags(r1, 0x3) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x1eb81bf1, 0xffff]) 00:04:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8c}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 00:04:06 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 00:04:06 executing program 4: r0 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="04002bbd7000fedbdf250300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000c580)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000180)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) 00:04:06 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000740)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2106428, &(0x7f0000000040)={[{@noacl='noacl'}]}) 00:04:06 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x3000000, [], [{}, {0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff}]}) 00:04:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff03, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 00:04:07 executing program 3: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x4332, 0x0, 0x4}, 0x1c) 00:04:07 executing program 5: socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:04:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f00000004c0)='/dev/binder#\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCEXCL(r2, 0x540c) fcntl$setsig(0xffffffffffffffff, 0xa, 0x34) setgid(0xee01) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x6, 0xa017, 0x4, 0x10000, 0x10000, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x244}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000240)={0x1ff}, &(0x7f0000000100)={0x0, r3+30000000}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) 00:04:07 executing program 0: unshare(0x44000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r0, 0x60, 0x0, 0x4) 00:04:07 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r1, r0, 0x0) 00:04:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}}, 0x0) [ 314.645353][ T9412] IPVS: ftp: loaded support on port[0] = 21 00:04:07 executing program 4: r0 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20008000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="04002bbd7000fedbdf250300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000c580)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000180)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 314.762655][ T9391] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 314.762655][ T9391] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 314.762655][ T9391] 00:04:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}}, 0x0) [ 314.859831][ T9391] EXT4-fs (sda1): re-mounted. Opts: noacl,,errors=continue [ 314.894388][ T9432] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 314.894388][ T9432] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 314.894388][ T9432] [ 314.940024][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 314.951150][ T9432] EXT4-fs (sda1): re-mounted. Opts: noacl,,errors=continue 00:04:07 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000740)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2106428, &(0x7f0000000040)={[{@noacl='noacl'}]}) 00:04:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200), 0x4) 00:04:08 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x4, [@int, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], 'u'}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x6c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 315.164258][ T154] tipc: TX() has been purged, node left! [ 315.221347][ T9470] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 315.221347][ T9470] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 315.221347][ T9470] 00:04:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)}, {&(0x7f0000001a40)}, {&(0x7f0000000140)="6771dc6032", 0x5}, {0x0}, {0x0}, {&(0x7f0000001c00)="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", 0x112}, {&(0x7f00000006c0)}, {&(0x7f0000000780)="c8326de5b27bd6d695de8dc9cf4abd3e52cf0486a294ab4b7e45a79abf5eac302c3391490167c7a8203a6d4bd93e7a9bf2fc8409048696460895ac8b645b88d2edc8108d05341005c3bf10eff955e3504a8e88f604641ff033f4ed207cce23987ed929dc225be8e58a28dc042517adc3d03e3111e6e558af0f78821ea279a275ec87ddde496724e0076adfa4b98dd2a5bdbd0c8f59ddabac84", 0x99}], 0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r3], 0x20}, 0x6008005) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 315.298649][ T9470] EXT4-fs (sda1): re-mounted. Opts: noacl,,errors=continue 00:04:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200), 0x4) [ 315.425247][ T9477] ptrace attach of "/root/syz-executor.0"[9475] was attempted by "/root/syz-executor.0"[9477] [ 315.509018][ T8144] Bluetooth: hci5: command 0x0419 tx timeout [ 315.583595][ T28] audit: type=1804 audit(1599091448.419:21): pid=9483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir297501882/syzkaller.ecPBoU/24/bus" dev="sda1" ino=15915 res=1 errno=0 00:04:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x3e}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:04:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x58, 0x2, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 00:04:09 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0xa, 0x0, 0x4) 00:04:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200), 0x4) 00:04:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) 00:04:09 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x44000600) ioctl$LOOP_CLR_FD(r0, 0x125f) 00:04:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r1, r2) 00:04:09 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0x8010661b, 0x0) 00:04:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 00:04:09 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_evm(&(0x7f0000000180)='./bus/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./bus/file0/file0\x00', 0x0) 00:04:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200), 0x4) [ 317.040033][ T9503] IPVS: ftp: loaded support on port[0] = 21 00:04:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x34}}, 0x0) 00:04:10 executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) 00:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) socket(0x11, 0x800000003, 0x0) [ 317.303550][ T9520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:10 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_evm(&(0x7f0000000180)='./bus/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./bus/file0/file0\x00', 0x0) 00:04:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 317.405328][ T9544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.445197][ T9508] IPVS: ftp: loaded support on port[0] = 21 00:04:10 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) 00:04:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf17", 0x14}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 00:04:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20}, {0x6}]}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r0, 0x0, r2) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) [ 317.751793][ T9568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r6}}}], 0x28}, 0xa00) 00:04:10 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_evm(&(0x7f0000000180)='./bus/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./bus/file0/file0\x00', 0x0) 00:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) [ 317.946489][ T9589] ptrace attach of "/root/syz-executor.3"[9588] was attempted by "/root/syz-executor.3"[9589] 00:04:10 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fchown(r0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0xfff000) [ 317.994972][ T9590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 318.299804][ T9601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.749129][ T28] audit: type=1800 audit(1599091451.589:22): pid=9549 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15921 res=0 errno=0 00:04:11 executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x5, 0x0) 00:04:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000300)="48000000150019000000000101048c590a88ffffff01000100000008000200ff5affff00c7e5060000000000f7ffffffffffe9f60d18125d4b18857a9eace3dbe8b12d0000000000", 0x48}], 0x1) 00:04:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r6}}}], 0x28}, 0xa00) 00:04:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 00:04:11 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_evm(&(0x7f0000000180)='./bus/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./bus/file0/file0\x00', 0x0) 00:04:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum={0x0, 0x0, 0x0, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{}, {0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) 00:04:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 00:04:12 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000200)=0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0x10) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000380)=0xc0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r5 = socket(0x0, 0x2, 0x0) getsockopt$inet_int(r5, 0x88, 0xa, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) [ 319.194875][ T9619] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x44000600) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, &(0x7f00000001c0), 0x0, 0x0) 00:04:12 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setxattr$security_evm(&(0x7f0000000180)='./bus/file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 00:04:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 00:04:12 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1b0000001a000700ab0925000900070002ab0700a90110001d6036", 0x1b) [ 319.573917][ T9639] IPVS: ftp: loaded support on port[0] = 21 [ 319.699156][ T9648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:13 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1ff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000062101de4ab6263be784c5fa778a28372c1d791cb1baa7280662a0931d3aabc97", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e0000000400018030000280140001000000000000000000000000000000000006000f00fb00"], 0x48}}, 0x2804c014) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000700)=[&(0x7f0000000400)='/dev/fuse\x00', &(0x7f0000000580)=')\\\xf9\x99{-.,\xb3-^!&$\x00', &(0x7f00000005c0)='/dev/fuse\x00', &(0x7f0000000600)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000640)='fd']) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) 00:04:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 00:04:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000013002b0300"/20, @ANYBLOB="000000000000000034001680300001"], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 00:04:13 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000480), 0xc, &(0x7f0000000bc0)={&(0x7f00000020c0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x4c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000900)=""/217, 0xd9}], 0x2}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000a00)=""/146, 0x92}, {&(0x7f0000000ac0)=""/204, 0xcc}, {&(0x7f0000000c40)=""/195, 0xc3}, {&(0x7f0000000540)=""/65, 0x41}], 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d40)=""/84, 0x54}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f00000021c0)=""/152, 0x98}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3a1}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 00:04:13 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00a8b9402137c78f5e42eb2932c6b7bfab"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 00:04:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') r2 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="92"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 00:04:13 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) [ 320.815254][ T9684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:13 executing program 1: r0 = socket(0x40000000011, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x8) 00:04:13 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:13 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getdents64(r0, 0x0, 0x0) [ 320.912926][ T9692] ptrace attach of "/root/syz-executor.0"[9691] was attempted by "/root/syz-executor.0"[9692] 00:04:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/250, 0xfa}], 0x5, 0x1f, 0x0) [ 321.182421][ T154] tipc: TX() has been purged, node left! [ 321.189856][ T154] tipc: TX() has been purged, node left! [ 321.218121][ T154] tipc: TX() has been purged, node left! [ 321.224855][ T154] tipc: TX() has been purged, node left! 00:04:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:04:14 executing program 1: unshare(0x600) r0 = socket(0x11, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0xa, &(0x7f0000002dc0)) 00:04:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 00:04:14 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @typedef, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xc3}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:04:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0xc5e563a}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4b1, 0x101000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:04:14 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:14 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 00:04:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x4f) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x540b, 0x0) 00:04:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)) 00:04:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') readlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x33c) 00:04:14 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x40003}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @multicast2}}, 0x1c) 00:04:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x101, 0x8, 0x0, 0x0, 0x0, 0xc5e563a}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4b1, 0x101000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 00:04:14 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/timer\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x3}, {}, @cond=[{0x0, 0x0, 0x8}]}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000800)='dctcp\x00', 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x0, 0x0, 0x288, 0x0, 0x358, 0x210, 0x210, 0x358, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x288, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_0\x00', {0xbc22, 0x0, 0x71, 0x0, 0x0, 0x8, 0x2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x11c8, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 00:04:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x21b1c0f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10c020, &(0x7f0000000200)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 00:04:14 executing program 1: r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 00:04:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0xd, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 321.961763][ T9765] overlayfs: failed to resolve './file1': -2 [ 321.994292][ T9767] EXT4-fs (sda1): Unrecognized mount option "rootcontext=unconfined_u" or missing value 00:04:14 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) [ 322.142969][ T9779] EXT4-fs (sda1): Unrecognized mount option "rootcontext=unconfined_u" or missing value [ 322.339998][ T9784] overlayfs: failed to resolve './file1': -2 00:04:16 executing program 5: r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0) 00:04:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x0, 0xf8}, {}, {0x6, 0x0, 0x0, 0x7ffffff4}]}) 00:04:16 executing program 1: r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 00:04:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x6, 0x0, 0x0, 0x6d9, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x89ffffff, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x6e3) 00:04:16 executing program 4: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='defcontext=st']) write$UHID_INPUT(r1, &(0x7f0000003500)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:04:16 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) 00:04:17 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) 00:04:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6006000000033a0020010000000000000000000000000001ff020000000000000000000000000001"], 0x0) 00:04:17 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) [ 324.112478][ T9810] overlayfs: failed to resolve './file1': -2 00:04:17 executing program 4: symlink(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000006c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 324.274194][ T9822] fuse: Bad value for 'fd' 00:04:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) 00:04:17 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[], 0x4b) write$9p(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xa198) fcntl$setlease(r0, 0x400, 0x1) [ 324.399247][ T9826] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:04:17 executing program 2: symlink(&(0x7f00000000c0)='..', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) [ 324.641097][ T9832] ------------[ cut here ]------------ [ 324.665593][ T9832] WARNING: CPU: 1 PID: 9832 at fs/overlayfs/file.c:81 ovl_real_fdget_meta+0x49c/0x530 [ 324.704537][ T9832] Kernel panic - not syncing: panic_on_warn set ... [ 324.711164][ T9832] CPU: 0 PID: 9832 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 324.711676][ T9836] overlayfs: overlapping upperdir path [ 324.719738][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.719755][ T9832] Call Trace: [ 324.719776][ T9832] dump_stack+0x198/0x1fd [ 324.719796][ T9832] panic+0x347/0x7c0 [ 324.719816][ T9832] ? __warn_printk+0xf3/0xf3 [ 324.719835][ T9832] ? printk+0xba/0xed [ 324.755337][ T9832] ? log_store.cold+0x16/0x16 [ 324.760023][ T9832] ? __warn.cold+0x5/0x46 [ 324.764364][ T9832] ? ovl_real_fdget_meta+0x49c/0x530 [ 324.769652][ T9832] __warn.cold+0x20/0x46 [ 324.773901][ T9832] ? ovl_real_fdget_meta+0x49c/0x530 [ 324.779190][ T9832] report_bug+0x1bd/0x210 [ 324.783599][ T9832] handle_bug+0x38/0x90 [ 324.787761][ T9832] exc_invalid_op+0x14/0x40 [ 324.792324][ T9832] asm_exc_invalid_op+0x12/0x20 [ 324.797187][ T9832] RIP: 0010:ovl_real_fdget_meta+0x49c/0x530 [ 324.803083][ T9832] Code: ff 4c 89 ff e8 f5 81 2a ff e9 ff fc ff ff e8 eb 81 2a ff e9 c5 fc ff ff 4c 89 f7 e8 4e 82 2a ff e9 5d fd ff ff e8 94 6f ea fe <0f> 0b 41 bd fb ff ff ff e9 fd fc ff ff e8 d2 81 2a ff e9 84 fb ff [ 324.822689][ T9832] RSP: 0018:ffffc90005a67a78 EFLAGS: 00010246 [ 324.828819][ T9832] RAX: 0000000000040000 RBX: 0000000000002000 RCX: ffffc900112b9000 [ 324.836801][ T9832] RDX: 0000000000040000 RSI: ffffffff8289db6c RDI: 0000000000000005 [ 324.844777][ T9832] RBP: 0000000004068002 R08: 0000000000000000 R09: ffff888094cd4ae0 [ 324.852754][ T9832] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880a20c0280 [ 324.860728][ T9832] R13: ffff888084fc9238 R14: 000000000002a002 R15: ffff8880a20c0300 [ 324.868723][ T9832] ? ovl_real_fdget_meta+0x49c/0x530 [ 324.874022][ T9832] ? ovl_real_fdget_meta+0x49c/0x530 [ 324.879310][ T9832] ovl_splice_read+0x83/0x1f0 [ 324.883998][ T9832] ? ovl_mmap+0x2f0/0x2f0 [ 324.888330][ T9832] ? security_file_permission+0x248/0x560 [ 324.894058][ T9832] ? ovl_mmap+0x2f0/0x2f0 [ 324.898412][ T9832] do_splice_to+0x10b/0x170 [ 324.902928][ T9832] splice_direct_to_actor+0x307/0x980 [ 324.908308][ T9832] ? generic_splice_sendpage+0x140/0x140 [ 324.913947][ T9832] ? do_splice_to+0x170/0x170 [ 324.918630][ T9832] ? security_file_permission+0x248/0x560 [ 324.924362][ T9832] do_splice_direct+0x1b3/0x280 [ 324.929226][ T9832] ? splice_direct_to_actor+0x980/0x980 [ 324.934785][ T9832] ? __sb_start_write+0x1d5/0x470 [ 324.939838][ T9832] do_sendfile+0x55f/0xd40 [ 324.944268][ T9832] ? do_compat_pwritev64+0x1b0/0x1b0 [ 324.949558][ T9832] ? __might_fault+0x190/0x1d0 [ 324.954335][ T9832] __x64_sys_sendfile64+0x149/0x210 [ 324.959533][ T9832] ? __ia32_sys_sendfile+0x220/0x220 [ 324.964818][ T9832] ? syscall_enter_from_user_mode+0x20/0x290 [ 324.970789][ T9832] ? lockdep_hardirqs_on+0x53/0x100 [ 324.975974][ T9832] do_syscall_64+0x2d/0x70 [ 324.980374][ T9832] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 324.986248][ T9832] RIP: 0033:0x45d5b9 [ 324.990130][ T9832] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.009711][ T9832] RSP: 002b:00007f9f328b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.018104][ T9832] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 325.026055][ T9832] RDX: 0000000020000200 RSI: 0000000000000003 RDI: 0000000000000003 [ 325.034005][ T9832] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 325.041957][ T9832] R10: 000000000000a198 R11: 0000000000000246 R12: 000000000118cf4c [ 325.049908][ T9832] R13: 00007fff314fdddf R14: 00007f9f328b79c0 R15: 000000000118cf4c [ 325.059320][ T9832] Kernel Offset: disabled [ 325.063724][ T9832] Rebooting in 86400 seconds..