[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2020/11/20 09:37:17 fuzzer started 2020/11/20 09:37:17 dialing manager at 10.128.0.26:46639 2020/11/20 09:37:18 syscalls: 3449 2020/11/20 09:37:18 code coverage: enabled 2020/11/20 09:37:18 comparison tracing: enabled 2020/11/20 09:37:18 extra coverage: enabled 2020/11/20 09:37:18 setuid sandbox: enabled 2020/11/20 09:37:18 namespace sandbox: enabled 2020/11/20 09:37:18 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/20 09:37:18 fault injection: enabled 2020/11/20 09:37:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/20 09:37:18 net packet injection: enabled 2020/11/20 09:37:18 net device setup: enabled 2020/11/20 09:37:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/20 09:37:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/20 09:37:18 USB emulation: enabled 2020/11/20 09:37:18 hci packet injection: enabled 2020/11/20 09:37:18 wifi device emulation: enabled 09:40:42 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 09:40:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$dsp(r0, &(0x7f00000000c0)=""/179, 0xb3) read$char_raw(r0, &(0x7f000000a400)=ANY=[], 0xa200) 09:40:43 executing program 2: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000002780)) 09:40:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:40:43 executing program 4: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000040)=""/188, 0x32, 0xbc, 0x8}, 0x20) 09:40:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)=0x300) syzkaller login: [ 280.238948][ T8493] IPVS: ftp: loaded support on port[0] = 21 [ 280.415212][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 280.653928][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 280.714923][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 280.883862][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.901053][ T8499] IPVS: ftp: loaded support on port[0] = 21 [ 280.908536][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.917002][ T8493] device bridge_slave_0 entered promiscuous mode [ 280.930055][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.937353][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.945646][ T8493] device bridge_slave_1 entered promiscuous mode [ 281.018949][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.085962][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.232049][ T8493] team0: Port device team_slave_0 added [ 281.265105][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 281.276708][ T8493] team0: Port device team_slave_1 added [ 281.304092][ T8501] IPVS: ftp: loaded support on port[0] = 21 [ 281.330936][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.346532][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.373315][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.452411][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.464257][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.493680][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.545927][ T8493] device hsr_slave_0 entered promiscuous mode [ 281.556052][ T8493] device hsr_slave_1 entered promiscuous mode [ 281.604796][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 281.827550][ T8596] IPVS: ftp: loaded support on port[0] = 21 [ 281.940183][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.950972][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.963123][ T8495] device bridge_slave_0 entered promiscuous mode [ 281.974414][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.981797][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.991539][ T8495] device bridge_slave_1 entered promiscuous mode [ 282.035638][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 282.168535][ T3003] Bluetooth: hci0: command 0x0409 tx timeout [ 282.171321][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.228800][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.261537][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.269360][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.279576][ T8497] device bridge_slave_0 entered promiscuous mode [ 282.287375][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 282.325786][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.339523][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.348186][ T8497] device bridge_slave_1 entered promiscuous mode [ 282.408028][ T3132] Bluetooth: hci1: command 0x0409 tx timeout [ 282.447170][ T8495] team0: Port device team_slave_0 added [ 282.469505][ T8495] team0: Port device team_slave_1 added [ 282.501480][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.513837][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.545145][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.552715][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.562510][ T8499] device bridge_slave_0 entered promiscuous mode [ 282.614335][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.622017][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.633073][ T8499] device bridge_slave_1 entered promiscuous mode [ 282.648406][ T30] Bluetooth: hci2: command 0x0409 tx timeout [ 282.676976][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.684341][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.713671][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.740434][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.747707][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.774469][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.798605][ T8497] team0: Port device team_slave_0 added [ 282.805025][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.813875][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.823250][ T8501] device bridge_slave_0 entered promiscuous mode [ 282.861442][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.882798][ T8497] team0: Port device team_slave_1 added [ 282.893724][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.898749][ T3132] Bluetooth: hci3: command 0x0409 tx timeout [ 282.906919][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.916382][ T8501] device bridge_slave_1 entered promiscuous mode [ 282.955771][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.975904][ T8493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.053896][ T8495] device hsr_slave_0 entered promiscuous mode [ 283.065267][ T8495] device hsr_slave_1 entered promiscuous mode [ 283.075386][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.084560][ T8495] Cannot create hsr debugfs directory [ 283.093167][ T8493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.127469][ T30] Bluetooth: hci4: command 0x0409 tx timeout [ 283.131580][ T8499] team0: Port device team_slave_0 added [ 283.145292][ T8499] team0: Port device team_slave_1 added [ 283.160359][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.168320][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.197027][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.211508][ T8493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.231927][ T8493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.243426][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.269579][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.286034][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.294412][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.322472][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.337899][ T8596] chnl_net:caif_netlink_parms(): no params data found [ 283.380780][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.389202][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.417082][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.483824][ T8501] team0: Port device team_slave_0 added [ 283.490683][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.499169][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.525575][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.545149][ T8497] device hsr_slave_0 entered promiscuous mode [ 283.552875][ T8497] device hsr_slave_1 entered promiscuous mode [ 283.560695][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.568735][ T8497] Cannot create hsr debugfs directory [ 283.586788][ T8501] team0: Port device team_slave_1 added [ 283.685982][ T8499] device hsr_slave_0 entered promiscuous mode [ 283.694561][ T8499] device hsr_slave_1 entered promiscuous mode [ 283.707125][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.714902][ T8499] Cannot create hsr debugfs directory [ 283.777355][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 283.784038][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.795609][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.822907][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.845127][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.858706][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.885547][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.971899][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.979233][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.987106][ T8596] device bridge_slave_0 entered promiscuous mode [ 284.019155][ T8501] device hsr_slave_0 entered promiscuous mode [ 284.028919][ T8501] device hsr_slave_1 entered promiscuous mode [ 284.035818][ T8501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.045796][ T8501] Cannot create hsr debugfs directory [ 284.056980][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.064501][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.073086][ T8596] device bridge_slave_1 entered promiscuous mode [ 284.191335][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.220196][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.247638][ T3003] Bluetooth: hci0: command 0x041b tx timeout [ 284.325841][ T8596] team0: Port device team_slave_0 added [ 284.374779][ T8596] team0: Port device team_slave_1 added [ 284.450855][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.474278][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.481640][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.509167][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.509760][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 284.534673][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.542211][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.569710][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.622727][ T8495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.661740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.671471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.708901][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.716918][ T8495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.741009][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 284.760807][ T8495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 284.774252][ T8495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.800308][ T8596] device hsr_slave_0 entered promiscuous mode [ 284.811778][ T8596] device hsr_slave_1 entered promiscuous mode [ 284.819952][ T8596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.829563][ T8596] Cannot create hsr debugfs directory [ 284.835323][ T8497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.848910][ T8497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.902629][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.912433][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.922273][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.929843][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.940652][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.949732][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.958837][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.965958][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.967565][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 284.978526][ T8497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.006900][ T8497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.034824][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.044610][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.081573][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.137364][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.147106][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.175681][ T8501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.207509][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 285.221533][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.249702][ T8501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.280014][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.289210][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.299834][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.309184][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.332696][ T8501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.351484][ T8499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.380690][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.394309][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.405135][ T8501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.427861][ T8499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.439313][ T8499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.465517][ T8499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.477645][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.595268][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.620264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.629681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.656861][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.750348][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.760459][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.781915][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.847370][ T3003] Bluetooth: hci5: command 0x041b tx timeout [ 285.885660][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.896273][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.905077][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.912463][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.920834][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.930235][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.939021][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.946403][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.954953][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.964339][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.974038][ T8596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.028812][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.037895][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.046867][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.058000][ T8596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.074048][ T8596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.116427][ T8596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.145393][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.161429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.171430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.181291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.190904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.207807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.215998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.224792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.234932][ T8493] device veth0_vlan entered promiscuous mode [ 286.289265][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.299323][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.314733][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.323425][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.327905][ T3003] Bluetooth: hci0: command 0x040f tx timeout [ 286.350985][ T8493] device veth1_vlan entered promiscuous mode [ 286.368756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.385143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.393861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.408615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.416489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.429495][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.454741][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.469073][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.496631][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.539197][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.549039][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.563234][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.567927][ T3217] Bluetooth: hci1: command 0x040f tx timeout [ 286.575889][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.584521][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.596984][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.605304][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.632096][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.643067][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.651707][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.663384][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.673628][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.681485][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.691438][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.716757][ T8493] device veth0_macvtap entered promiscuous mode [ 286.752261][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.760908][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.769704][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.779698][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.792938][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.807491][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 286.818113][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.828320][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.837170][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.867649][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.875530][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.890158][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.899403][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.906516][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.915435][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.925005][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.934361][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.941585][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.950602][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.960677][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.981092][ T8493] device veth1_macvtap entered promiscuous mode [ 287.010506][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.033580][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.042877][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.047970][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 287.056009][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.066344][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.077640][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.086356][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.096574][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.106400][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.115766][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.125271][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.134489][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.143629][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.152419][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.159756][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.167700][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.176599][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.185515][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.192729][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.203942][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.213646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.227882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.236945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.269101][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.280051][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.288155][ T3217] Bluetooth: hci4: command 0x040f tx timeout [ 287.295104][ T8497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.315929][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.341327][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.354281][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.364589][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.375847][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.384953][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.398442][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.421193][ T8501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.433804][ T8501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.460933][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.470180][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.480472][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.489971][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.499372][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.508702][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.517086][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.526804][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.605130][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.616380][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.627137][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.635796][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.643995][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.653822][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.664426][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.673425][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.682388][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.691650][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.704121][ T8493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.715652][ T8493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.724934][ T8493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.733998][ T8493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.760164][ T8499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.770401][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.781946][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.793348][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.806416][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.835084][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.900308][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.910161][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.923424][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.932217][ T3003] Bluetooth: hci5: command 0x040f tx timeout [ 287.950260][ T8596] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.998323][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.006939][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.083277][ T8495] device veth0_vlan entered promiscuous mode [ 288.119501][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.138073][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.147188][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.168841][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.175960][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.217788][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.225630][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.234247][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.245100][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.254847][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.264248][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.281974][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.296150][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.308279][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.315384][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.330081][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.343283][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.353148][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.407775][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 288.448598][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.458052][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.467000][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.479066][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.491909][ T8497] device veth0_vlan entered promiscuous mode [ 288.524781][ T8495] device veth1_vlan entered promiscuous mode [ 288.550032][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.562194][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.572766][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.583229][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.622538][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.631644][ T273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.649193][ T9806] Bluetooth: hci1: command 0x0419 tx timeout [ 288.650605][ T273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.664866][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.691646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.710255][ T8497] device veth1_vlan entered promiscuous mode [ 288.754168][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.767489][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.776740][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.786839][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.797148][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.806704][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.818698][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.828819][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.881321][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.887985][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 288.911369][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.920606][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.933569][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.952902][ T273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.983363][ T8501] device veth0_vlan entered promiscuous mode [ 288.995683][ T273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.005321][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.016343][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.026806][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.036220][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.047116][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.056839][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.071854][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.081279][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.090707][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.100726][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.112947][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.123383][ T8499] device veth0_vlan entered promiscuous mode [ 289.133354][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 289.139334][ T8495] device veth0_macvtap entered promiscuous mode [ 289.188358][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.206105][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.219959][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.243355][ T8501] device veth1_vlan entered promiscuous mode [ 289.263819][ T8495] device veth1_macvtap entered promiscuous mode [ 289.279114][ T8497] device veth0_macvtap entered promiscuous mode 09:40:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="3836d88c93e25ed21562a05d3984613d2172f8bb60557d3e868948c4356ac2a212047359fb350ed44e9a70d28f564b561d0ec425b8832f610ea294db5b1710066704cfeaea419a9b078cbb1117cea07863e850ed345eabb7f8dff39be69b924c2a5a80b74620e422f2eff6160ebbfa84dfc3dcce559bee6672ee951998583ed78e1a55a492fed46753b3d855e9ac04db87862c49aabcce30a02c", 0x1}], 0x6) [ 289.294286][ T8499] device veth1_vlan entered promiscuous mode [ 289.317346][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.325902][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.349584][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.367359][ T7] Bluetooth: hci4: command 0x0419 tx timeout 09:40:53 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40001, 0x0) write$hidraw(r0, &(0x7f0000000080)='\n', 0x1) [ 289.396550][ T8497] device veth1_macvtap entered promiscuous mode [ 289.485985][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0 09:40:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) nanosleep(&(0x7f0000000000), 0x0) [ 289.544789][ T8501] device veth0_macvtap entered promiscuous mode [ 289.601491][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.633868][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.665445][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.683725][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.699013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.715813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.726919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.737474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.746389][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.756947][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.769190][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.780567][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.791958][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.805017][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.824286][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.835146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.846296][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.878289][ T8499] device veth0_macvtap entered promiscuous mode [ 289.886813][ T8501] device veth1_macvtap entered promiscuous mode [ 289.897476][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:40:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000000540)={0x10, 0x35, 0x1}, 0x10}], 0x1}, 0x0) 09:40:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x778000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "f530ef1b7b63ccea159bb508513952c7d5960e187cc0ecc2572e2911612e8e86"}) [ 289.919916][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.946822][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.007877][ T3003] Bluetooth: hci5: command 0x0419 tx timeout [ 290.009976][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.033325][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.051083][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.065526][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.091849][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1 09:40:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x778000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "f530ef1b7b63ccea159bb508513952c7d5960e187cc0ecc2572e2911612e8e86"}) [ 290.124574][ T8499] device veth1_macvtap entered promiscuous mode [ 290.149599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 09:40:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x778000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "f530ef1b7b63ccea159bb508513952c7d5960e187cc0ecc2572e2911612e8e86"}) [ 290.178145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.188577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.217924][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.229411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.239559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.249615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.263281][ T8497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.292586][ T8497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.319969][ T8497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.335770][ T8497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.422293][ T8495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.437897][ T8495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.446784][ T8495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.464401][ T8495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.500036][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.518396][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.629000][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.641357][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.655009][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.668906][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.680384][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.692581][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.705083][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.724160][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.733340][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.743298][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.753428][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.764589][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.773529][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.784827][ T8596] device veth0_vlan entered promiscuous mode [ 290.799882][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.821510][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.832448][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.843024][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.853510][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.864509][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.876791][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.904114][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.918023][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.929112][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.941082][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.951616][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.963155][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.975093][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.986130][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.000909][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.020976][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.030401][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.041785][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.051842][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.071831][ T8501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.081151][ T8501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.090898][ T8501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.100339][ T8501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.126864][ T8596] device veth1_vlan entered promiscuous mode [ 291.170531][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.190835][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.201923][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.201931][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.201947][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.201955][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.201972][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.201979][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.204299][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.297530][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 291.306076][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.326005][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.335814][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.350826][ T8499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.362350][ T8499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.379504][ T8499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.389994][ T8499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.477478][ T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.530644][ T8596] device veth0_macvtap entered promiscuous mode [ 291.539916][ T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.554116][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.569926][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.582986][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.592358][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.662057][ T8596] device veth1_macvtap entered promiscuous mode [ 291.712272][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.727595][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.767784][ T3132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.838003][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.896057][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.939125][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.940452][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.967331][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.982473][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.994355][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.005169][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.016679][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.027351][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.040301][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.051383][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.064390][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.075721][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.091436][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.100058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.112042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.120748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.130407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.160123][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.200983][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.230400][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.286257][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.310889][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.322815][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.345782][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.361216][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.371733][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.383305][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.394037][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.424766][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.440982][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.461989][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.501078][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.535405][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.555334][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.565364][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.576639][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.610034][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.619259][ T8596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 09:40:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:40:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 292.652719][ T8596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.672619][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.739636][ T8596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.764177][ T8596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.771716][ T9939] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 292.823070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.917888][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.961663][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.032248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.058633][ T9960] BPF:[1] STRUCT (anon) [ 293.076525][ T9962] BPF:[1] STRUCT (anon) [ 293.078308][ T9960] BPF: [ 293.103959][ T9962] BPF: [ 293.107458][ T9962] BPF:meta_left:12 meta_needed:24 [ 293.112504][ T9962] BPF: [ 293.112504][ T9962] [ 293.112938][ T9960] BPF:meta_left:12 meta_needed:24 [ 293.144932][ T9960] BPF: [ 293.144932][ T9960] [ 293.182529][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.198135][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.245551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.263058][ C1] hrtimer: interrupt took 41266 ns [ 293.279786][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.292832][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.363514][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.534175][ T9974] overlayfs: failed to resolve './bus': -2 [ 293.588041][ T9981] overlayfs: 'file0' not a directory [ 293.603116][ T9980] overlayfs: failed to resolve './file1': -2 09:40:57 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:40:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x778000, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "f530ef1b7b63ccea159bb508513952c7d5960e187cc0ecc2572e2911612e8e86"}) 09:40:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600114900000084ffcf8a63ed", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 09:40:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 09:40:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 09:40:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)=0x300) [ 293.706553][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:40:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)=0x300) 09:40:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 293.794987][ T9995] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:40:57 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 293.979040][ T9995] ip6gre0: Master is either lo or non-ether device [ 293.999678][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.049946][ T9995] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:40:58 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 09:40:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)=0x300) [ 294.216559][T10004] overlayfs: failed to resolve './bus': -2 09:40:58 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r3, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 294.305684][T10025] ip6gre0: Master is either lo or non-ether device 09:40:58 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:40:58 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000040)=r1, 0x4) 09:40:58 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000007c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a6cf0d04f3f2c0a2"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/205, 0xcd}], 0x1}, 0x0) [ 294.435322][T10026] overlayfs: './file0' not a directory 09:40:58 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:40:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 09:40:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000040)=""/63, 0xfe54) 09:40:58 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:40:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x1, @random="4683885fca92"}, 0xa, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 09:40:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 295.283098][T10061] overlayfs: failed to resolve './bus': -2 09:40:59 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x4ac, 0xffffffff, 0xd8, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'wg2\x00', {}, {}, 0x2, 0x8, 0x2}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x0, 0x3}, 0x7f, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x0, 0x11, 0x5, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x4, 0x5, 0x4}}}}, {{@ipv6={@remote, @empty, [0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x0, 0x5, 0x0, 0x28}, 0x0, 0x1dc, 0x21c, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0xd7, [0x2, 0xca], 0x10000, 0x4, 0x4, [@private1, @private2, @dev={0xfe, 0x80, [], 0x40}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @empty, @empty, @loopback, @dev={0xfe, 0x80, [], 0xa}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x9, {0x1}}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 295.394580][T10052] device wlan1 entered promiscuous mode 09:40:59 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000400799a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 09:40:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:40:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') [ 295.931216][T10049] device wlan1 left promiscuous mode 09:40:59 executing program 4: clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x4240a543) r1 = gettid() tkill(r1, 0x1a) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x3, 0xffffffffffffffff, 0x0) [ 295.991686][T10077] overlayfs: failed to resolve './bus': -2 09:41:00 executing program 0: clock_getres(0xfffffffffffffff8, 0x0) [ 296.383209][T10072] device wlan1 entered promiscuous mode [ 296.391901][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 296.424082][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.455542][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:41:00 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') 09:41:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xbd0, &(0x7f0000000040)=0x0) r3 = memfd_create(&(0x7f0000000180)='-se\xa4\xb4*\xf5\x8b~\x03\xdan\x00\x19l\xfd\xd49\xb0\xe3\xc0[\xbb/Q\x10\x86\xed\x99\xf19\n\br\xa5C\xe9\b\t\xd0\xdb\xba;\xd6\x9b\xb5&-JR\xe4r\xf6;\a\xfcg\x03\x9b\xad\xfaBO\x10\xee\xc5+\xa4L\xb1\xb6\xec\x85)(\xdd\xf99\x13\xa0q\x1e\x172:M\xa5Eb[#\xa8\x8d\x9ai>\xa8\xa6\xfe\x98z\xdc&Fj\xf19@!\x93yC\x04LWK\x12HZ\xa1\xa1\xe6<\xaf^l\xf1\xa0\xcf\xd1\xa6\xdc\xf1Z\xa7?\x8c5\x85PJ\x1f?\x98)\x8f]\xaa\xc2G=\xac\xd2\x9a\x8fz\\\xc3\xa3\xd4\xb2\xe2\n\xa0\x9c\x8e\bntQ\xf6\xfa\xc5\xb2B\b\xf0f\xc9\x97\x0e\x99\xd0\x82\x8fG\xf4\xa3=\xd9r\xb8M\xe3\xe6\xff\x90\x9a\xb6\x19\x13>jS\x90\xebJ\x9f,\xf3%p\xa3\x03\xbe\xbd\x87\x80\xd3\xa1\xa0a\x86c\x96\v\\\xf3\xf9\xf8~V\xe6[\v(o\x1aF\x02\x93\xbf%m\xba9\x04\x0e\xd6(}\x02)\xe0\xc7\xa3=\x9d;\x996\xdd\xb4\xa7\x17sA\xd4\x9cU\xec\xb7-hg\xe7\xae\"ig=N\xdb\xa5+\x87+\x18\xeb\xad\x18a\x0e\f\x8f|G\xf17-[8\x9b\xa0e\xe3\b\x9d\xed\xdf\" \x1b[3\xe2\xa28L\x14\xd0\xca\x8a\x06\xa4\\D\xdb)\xc5\xea\x06-\xc9\xbeR', 0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x42a0, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0}]) 09:41:00 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) [ 296.640251][T10109] device wlan1 left promiscuous mode 09:41:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') 09:41:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000df0)=""/519, 0x20000ff7) 09:41:00 executing program 4: clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x4240a543) r1 = gettid() tkill(r1, 0x1a) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x3, 0xffffffffffffffff, 0x0) 09:41:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') 09:41:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x22, 0x20}]}}}]}, 0x44}}, 0x0) [ 297.120456][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:41:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x6}) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 09:41:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) [ 297.330552][T10132] input: syz0 as /devices/virtual/input/input5 [ 297.387966][T10132] input: syz0 as /devices/virtual/input/input6 [ 297.551175][T10113] device wlan1 entered promiscuous mode [ 297.561419][T10115] device wlan1 entered promiscuous mode 09:41:01 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:01 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) 09:41:01 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:01 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) 09:41:01 executing program 4: clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x4240a543) r1 = gettid() tkill(r1, 0x1a) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x3, 0xffffffffffffffff, 0x0) [ 297.977335][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:41:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) [ 298.040584][T10156] device wlan1 left promiscuous mode 09:41:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x10, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 09:41:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) 09:41:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) 09:41:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) 09:41:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_getoverrun(0x0) [ 298.535604][T10157] device wlan1 left promiscuous mode 09:41:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) [ 298.810343][T10159] device wlan1 entered promiscuous mode [ 298.817510][T10158] device wlan1 entered promiscuous mode [ 298.827122][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:41:02 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x30, &(0x7f0000678f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3100) 09:41:02 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xea\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%k\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0xa0153928c2131a8c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000001f680)={0x0, 0xfa, 0x0, 0x3, 0x104, 0xffffffffffffffff, 0x4}, 0x40) unlink(0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 09:41:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xe7) 09:41:02 executing program 4: clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x4240a543) r1 = gettid() tkill(r1, 0x1a) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x3, 0xffffffffffffffff, 0x0) 09:41:02 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 299.061404][T10199] libceph: Failed to parse monitor IPs: -22 [ 299.083992][T10204] libceph: Failed to parse monitor IPs: -22 09:41:03 executing program 1: clone3(&(0x7f0000000080)={0xc2006500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@any, 0x3}) [ 299.121599][T10200] device wlan1 left promiscuous mode 09:41:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 299.346982][T10211] IPVS: ftp: loaded support on port[0] = 21 09:41:03 executing program 0: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x92, 0x9, 0x0, "c07593e9", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) [ 299.564550][T10208] device wlan1 left promiscuous mode 09:41:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150008008178a8001600140004400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 299.868411][T10207] device wlan1 entered promiscuous mode [ 299.879370][T10209] device wlan1 entered promiscuous mode [ 299.907783][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 299.992727][T10229] IPv6: NLM_F_CREATE should be specified when creating new route 09:41:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "379a715a"}, 0x0, 0x0, @fd}) 09:41:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) 09:41:04 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000ac0), 0x8) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="ed", 0x1}], 0x1}, 0x0) 09:41:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xe7) [ 300.113760][T10212] IPVS: ftp: loaded support on port[0] = 21 09:41:04 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) sendmmsg$inet(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 300.278815][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 09:41:04 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) [ 300.326547][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 09:41:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xe7) 09:41:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 300.390120][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 300.455862][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.538691][ T7] usb 1-1: config 0 descriptor?? [ 300.651042][ T7] hub 1-1:0.0: USB hub found [ 300.817611][ T7] hub 1-1:0.0: 3 ports detected 09:41:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev, @empty}, 0x10) 09:41:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() symlink(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') getxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)=@random={'osx.', 'SEG6\x00'}, &(0x7f00000003c0)=""/74, 0x4a) [ 301.305236][ T7] usb 1-1: USB disconnect, device number 2 [ 302.017354][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd 09:41:06 executing program 0: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x92, 0x9, 0x0, "c07593e9", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 09:41:06 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 09:41:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 09:41:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xe7) 09:41:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) close(r0) 09:41:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() symlink(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') getxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)=@random={'osx.', 'SEG6\x00'}, &(0x7f00000003c0)=""/74, 0x4a) 09:41:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 09:41:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000002200)='net/rt_cache\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:41:06 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 09:41:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() symlink(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') getxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)=@random={'osx.', 'SEG6\x00'}, &(0x7f00000003c0)=""/74, 0x4a) [ 302.447438][ T7] usb 1-1: device not accepting address 3, error -71 09:41:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) close(r0) 09:41:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 302.837547][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 303.217820][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.255683][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.281148][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 303.307407][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.348110][ T7] usb 1-1: config 0 descriptor?? [ 303.408573][ T7] hub 1-1:0.0: USB hub found [ 303.628332][ T7] hub 1-1:0.0: 3 ports detected [ 304.112084][ T7] usb 1-1: USB disconnect, device number 4 09:41:08 executing program 0: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x92, 0x9, 0x0, "c07593e9", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 09:41:08 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 09:41:08 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000b840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000b100)=[{&(0x7f0000009b00)="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", 0x5c5}], 0x1}}], 0x5, 0x0) 09:41:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) close(r0) 09:41:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() symlink(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') getxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)=@random={'osx.', 'SEG6\x00'}, &(0x7f00000003c0)=""/74, 0x4a) 09:41:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 09:41:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x700, &(0x7f0000000800)}) 09:41:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 09:41:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) close(r0) 09:41:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="fc0000001900071f8a092504090007000a0880ffff0300000000e293210001c0ffffff9e00000000000affff0000000000001ec28656aaa79bb94b46fe000000bc000700000300f92fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00000100d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab820f06f70cce190a60aa47e9883997f391064e763b6f380f5bd92c83170e5bba4a463a1e00566f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0453264e00ccf19a494c8cf", 0xfc) 09:41:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000002000000080000020000000e1f4655fe1f4655f0100f03f53ef010001000000e0f4655f000000040000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008", 0x1d, 0x4100}, {0x0, 0x0, 0x2004080}], 0x0, &(0x7f0000000180)) 09:41:08 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 304.969188][T10380] loop2: detected capacity change from 0 to 67141632 [ 305.089244][T10380] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 305.097419][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 305.468032][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.488277][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.506859][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 305.516755][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.537716][ T7] usb 1-1: config 0 descriptor?? [ 305.588806][ T7] hub 1-1:0.0: USB hub found [ 305.807572][ T7] hub 1-1:0.0: 3 ports detected [ 306.289843][ T7] usb 1-1: USB disconnect, device number 5 09:41:10 executing program 0: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x92, 0x9, 0x0, "c07593e9", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 09:41:10 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x5, 0x10, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:41:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x9, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4a4f0de8"}}) 09:41:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x700, &(0x7f0000000800)}) 09:41:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000380)={0x5}) 09:41:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 09:41:10 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x5411, 0x0) 09:41:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x700, &(0x7f0000000800)}) 09:41:10 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x6, 0x0, 0x2, [{}]}]}}, &(0x7f0000000300)=""/250, 0x32, 0xfa, 0x8}, 0x20) 09:41:10 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0xffffffffffffffff) [ 307.081172][T10441] BPF:[1] ENUM (anon) [ 307.095849][T10442] BPF:[1] ENUM (anon) [ 307.103761][T10441] BPF:size=2 vlen=1 [ 307.117534][T10442] BPF:size=2 vlen=1 [ 307.123956][T10441] BPF: 09:41:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x80000001}, 0x40) [ 307.140028][T10442] BPF: [ 307.142871][T10442] BPF:Invalid name [ 307.146613][T10442] BPF: [ 307.146613][T10442] [ 307.168573][T10441] BPF:Invalid name [ 307.172449][T10441] BPF: [ 307.172449][T10441] [ 307.240247][T10394] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 307.630738][T10394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.649782][T10394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.672152][T10394] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 307.683677][T10394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.711102][T10394] usb 1-1: config 0 descriptor?? [ 307.760604][T10394] hub 1-1:0.0: USB hub found [ 307.967477][T10394] hub 1-1:0.0: 3 ports detected [ 308.455809][T10394] usb 1-1: USB disconnect, device number 6 09:41:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x0) 09:41:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x700, &(0x7f0000000800)}) 09:41:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000080)={[{@rodir='rodir'}]}) 09:41:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000104010300000000000000000000000008000540000000000500010001"], 0x24}}, 0x0) close(r0) 09:41:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4908, 0x1}, 0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x20) 09:41:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10001) 09:41:13 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10001) [ 309.060145][T10494] loop4: detected capacity change from 0 to 1536 09:41:13 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x84}}, 0x0) write$fb(0xffffffffffffffff, &(0x7f00000003c0)="92d7f093f969631ede49492711461861ec794ad77a1d0777f3c4b1de7c70da0c78195562137a5f58fa6043efd0c38545e27635ec015067f3b7a670879107f3a1290161123d58800cbb5b32788d23f0df61fa6b7be3d542708edfea344de432090d2d21e80e9eda01fa81ad140dcb51d404c6749cf1105be148c6ec42f4c8b7a5b61bfab6daadc57ee65a7848a833d629", 0x90) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000040)="e9", 0x1, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 09:41:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002500)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}], 0x30) [ 309.189973][T10494] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:41:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) 09:41:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10001) 09:41:13 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x12b}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 09:41:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7b, 0x11, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:41:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 09:41:13 executing program 5: r0 = socket(0x1, 0x5, 0x0) io_setup(0x3000, &(0x7f0000000000)=0x0) r2 = dup(r0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)='R', 0x1}]) 09:41:13 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x12b}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 09:41:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10001) 09:41:16 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:16 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:41:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hoplimit_2292={{0x10, 0x29, 0x4}}], 0x10}}], 0x2, 0x0) 09:41:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d4452d791cc0576c8624862b50090000a640434269e5cc09d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c739d187be7fede2e70a3c9944edf099471021894a286200cf118fc95ffda3c5c7581968691a172393c69cfeba5233c29b98f50e172cb42ea3d704f245af0e736e3834119950e3ffc1ae8292ec68c3a835491f30f00c06e84d4750a", 0xa3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x7) 09:41:16 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x12b}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 09:41:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) [ 312.264494][ T34] audit: type=1804 audit(1605865276.215:2): pid=10564 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/29/bus" dev="sda1" ino=15894 res=1 errno=0 09:41:16 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x12b}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 09:41:16 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) 09:41:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) 09:41:17 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 313.030982][ T34] audit: type=1804 audit(1605865276.985:3): pid=10590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/29/bus" dev="sda1" ino=15894 res=1 errno=0 [ 313.165189][ T34] audit: type=1800 audit(1605865276.985:4): pid=10564 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15894 res=0 errno=0 [ 313.256052][ T34] audit: type=1804 audit(1605865276.985:5): pid=10590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/29/bus" dev="sda1" ino=15894 res=1 errno=0 [ 313.356076][ T34] audit: type=1804 audit(1605865277.195:6): pid=10596 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/30/bus" dev="sda1" ino=15894 res=1 errno=0 09:41:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) [ 314.135307][ T34] audit: type=1800 audit(1605865278.085:7): pid=10596 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15894 res=0 errno=0 09:41:19 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) 09:41:19 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:41:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) 09:41:19 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x78) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "e30a000000ffffff", '\x00', "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) [ 315.401553][ T34] audit: type=1804 audit(1605865279.355:8): pid=10616 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/31/bus" dev="sda1" ino=15905 res=1 errno=0 09:41:19 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 315.873998][T10617] tls_set_device_offload: netdev not found [ 316.022996][T10617] tls_set_device_offload: netdev not found 09:41:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f00000043c0)=[{0x0, 0x0, 0x0}], 0x4924924924926a2, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="94", 0x1}], 0x1}, 0x0) 09:41:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) 09:41:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x24bc00) 09:41:20 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 09:41:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x10000, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) [ 316.730411][T10664] loop5: detected capacity change from 0 to 135266304 [ 317.006241][T10669] loop5: detected capacity change from 0 to 135266304 [ 317.041182][ T34] audit: type=1804 audit(1605865280.995:9): pid=10669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir369496174/syzkaller.GmbwXZ/23/file0/file0" dev="sda1" ino=15910 res=1 errno=0 [ 318.345131][ T34] audit: type=1800 audit(1605865282.295:10): pid=10616 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15905 res=0 errno=0 09:41:22 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0x898, 0x30, 0x1, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x898}}, 0x0) 09:41:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x583240, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x9}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x9}, 0xc) uselib(&(0x7f0000000280)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) 09:41:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:22 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 318.579543][T10692] loop5: detected capacity change from 0 to 135266304 [ 318.745550][ T34] audit: type=1804 audit(1605865282.695:11): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir248260480/syzkaller.5YHPYB/32/bus" dev="sda1" ino=15920 res=1 errno=0 09:41:22 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#!'], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:41:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 319.086568][T10708] loop2: detected capacity change from 0 to 135266304 [ 319.513885][T10725] nbd3: detected capacity change from 0 to 33555456 09:41:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x583240, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x9}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x9}, 0xc) uselib(&(0x7f0000000280)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) 09:41:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) [ 320.017633][T10737] loop5: detected capacity change from 0 to 135266304 09:41:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x583240, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x9}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x9}, 0xc) uselib(&(0x7f0000000280)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) [ 320.126320][T10740] loop2: detected capacity change from 0 to 135266304 [ 320.187433][ T8505] block nbd3: Receive control failed (result -104) 09:41:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000003c0)={0x9f0000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xfffffff8, [], @value64=0x4}}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/76) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22041, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000300)=0x30002, 0x30) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000000}, 0x4200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x2000000000000021, 0x1, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000340)='vlan0\x00', 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @rand_addr=0x64010101, 0xe22, 0x4, 'lblcr\x00', 0x16, 0x1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 0x40, 0x3, 0x6}}, 0x44) r7 = socket$inet6(0xa, 0xe, 0x1) close(r7) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x7}, 0x1000001ab) setsockopt$inet6_int(r8, 0x29, 0xc8, &(0x7f00000000c0)=0x3f, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8001}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x200000]}, 0x5c) 09:41:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x583240, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x9}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x9}, 0xc) uselib(&(0x7f0000000280)='./file0\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) [ 320.467624][T10753] loop5: detected capacity change from 0 to 135266304 [ 320.619175][T10761] loop2: detected capacity change from 0 to 135266304 09:41:24 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0xff6, 0xfe10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x0, @empty}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r1) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x3, 0x2002, 0x0) [ 321.725529][ T34] audit: type=1800 audit(1605865285.675:12): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15920 res=0 errno=0 09:41:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfffffda4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 09:41:26 executing program 2: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x57, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x94, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x4}, 0x0, 0x0, r0, 0x0) tkill(0x0, 0x27) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:41:26 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0xe7a035cf4856fee5}, 0x14}}, 0x0) [ 350.488321][ T2054] block nbd3: Possible stuck request 00000000bf9aed51: control (read@0,512B). Runtime 30 seconds [ 350.499528][ T2054] block nbd3: Possible stuck request 00000000343ca1c6: control (read@512,512B). Runtime 30 seconds [ 350.516808][ T2054] block nbd3: Possible stuck request 000000006c6236c5: control (read@1024,512B). Runtime 30 seconds [ 350.528057][ T2054] block nbd3: Possible stuck request 000000005046916f: control (read@1536,512B). Runtime 30 seconds [ 350.539810][ T2054] block nbd3: Possible stuck request 000000004c9344ba: control (read@2048,512B). Runtime 30 seconds [ 350.552113][ T2054] block nbd3: Possible stuck request 0000000063d1a22c: control (read@2560,512B). Runtime 30 seconds [ 350.563852][ T2054] block nbd3: Possible stuck request 000000001a1c0503: control (read@3072,512B). Runtime 30 seconds [ 350.575429][ T2054] block nbd3: Possible stuck request 000000003001a7fe: control (read@3584,512B). Runtime 30 seconds [ 380.567620][ T2054] block nbd3: Possible stuck request 00000000bf9aed51: control (read@0,512B). Runtime 60 seconds [ 380.578394][ T2054] block nbd3: Possible stuck request 00000000343ca1c6: control (read@512,512B). Runtime 60 seconds [ 380.589379][ T2054] block nbd3: Possible stuck request 000000006c6236c5: control (read@1024,512B). Runtime 60 seconds [ 380.601327][ T2054] block nbd3: Possible stuck request 000000005046916f: control (read@1536,512B). Runtime 60 seconds [ 380.612338][ T2054] block nbd3: Possible stuck request 000000004c9344ba: control (read@2048,512B). Runtime 60 seconds [ 380.623435][ T2054] block nbd3: Possible stuck request 0000000063d1a22c: control (read@2560,512B). Runtime 60 seconds [ 380.634613][ T2054] block nbd3: Possible stuck request 000000001a1c0503: control (read@3072,512B). Runtime 60 seconds [ 380.649972][ T2054] block nbd3: Possible stuck request 000000003001a7fe: control (read@3584,512B). Runtime 60 seconds [ 406.328284][ T9740] Bluetooth: hci0: command 0x0406 tx timeout [ 406.336548][ T9740] Bluetooth: hci1: command 0x0406 tx timeout [ 406.344733][ T9740] Bluetooth: hci2: command 0x0406 tx timeout [ 406.352908][ T9740] Bluetooth: hci3: command 0x0406 tx timeout [ 406.361163][ T9740] Bluetooth: hci4: command 0x0406 tx timeout [ 406.367269][ T9740] Bluetooth: hci5: command 0x0406 tx timeout [ 410.647636][ T2054] block nbd3: Possible stuck request 00000000bf9aed51: control (read@0,512B). Runtime 90 seconds [ 410.660950][ T2054] block nbd3: Possible stuck request 00000000343ca1c6: control (read@512,512B). Runtime 90 seconds [ 410.672909][ T2054] block nbd3: Possible stuck request 000000006c6236c5: control (read@1024,512B). Runtime 90 seconds [ 410.685160][ T2054] block nbd3: Possible stuck request 000000005046916f: control (read@1536,512B). Runtime 90 seconds [ 410.700658][ T2054] block nbd3: Possible stuck request 000000004c9344ba: control (read@2048,512B). Runtime 90 seconds [ 410.716263][ T2054] block nbd3: Possible stuck request 0000000063d1a22c: control (read@2560,512B). Runtime 90 seconds [ 410.731472][ T2054] block nbd3: Possible stuck request 000000001a1c0503: control (read@3072,512B). Runtime 90 seconds [ 410.749335][ T2054] block nbd3: Possible stuck request 000000003001a7fe: control (read@3584,512B). Runtime 90 seconds [ 440.737773][ T2054] block nbd3: Possible stuck request 00000000bf9aed51: control (read@0,512B). Runtime 120 seconds [ 440.748475][ T2054] block nbd3: Possible stuck request 00000000343ca1c6: control (read@512,512B). Runtime 120 seconds [ 440.767503][ T2054] block nbd3: Possible stuck request 000000006c6236c5: control (read@1024,512B). Runtime 120 seconds [ 440.781877][ T2054] block nbd3: Possible stuck request 000000005046916f: control (read@1536,512B). Runtime 120 seconds [ 440.794300][ T2054] block nbd3: Possible stuck request 000000004c9344ba: control (read@2048,512B). Runtime 120 seconds [ 440.807545][ T2054] block nbd3: Possible stuck request 0000000063d1a22c: control (read@2560,512B). Runtime 120 seconds [ 440.824377][ T2054] block nbd3: Possible stuck request 000000001a1c0503: control (read@3072,512B). Runtime 120 seconds [ 440.835593][ T2054] block nbd3: Possible stuck request 000000003001a7fe: control (read@3584,512B). Runtime 120 seconds [ 470.807684][ T2054] block nbd3: Possible stuck request 00000000bf9aed51: control (read@0,512B). Runtime 150 seconds [ 470.827574][ T2054] block nbd3: Possible stuck request 00000000343ca1c6: control (read@512,512B). Runtime 150 seconds [ 470.838633][ T2054] block nbd3: Possible stuck request 000000006c6236c5: control (read@1024,512B). Runtime 150 seconds [ 470.850256][ T2054] block nbd3: Possible stuck request 000000005046916f: control (read@1536,512B). Runtime 150 seconds [ 470.861318][ T2054] block nbd3: Possible stuck request 000000004c9344ba: control (read@2048,512B). Runtime 150 seconds [ 470.873621][ T2054] block nbd3: Possible stuck request 0000000063d1a22c: control (read@2560,512B). Runtime 150 seconds [ 470.884701][ T2054] block nbd3: Possible stuck request 000000001a1c0503: control (read@3072,512B). Runtime 150 seconds [ 470.899693][ T2054] block nbd3: Possible stuck request 000000003001a7fe: control (read@3584,512B). Runtime 150 seconds [ 474.007956][ T1657] INFO: task syz-executor.3:10725 can't die for more than 143 seconds. [ 474.016738][ T1657] task:syz-executor.3 state:D stack:26816 pid:10725 ppid: 8499 flags:0x00004004 [ 474.036172][ T1657] Call Trace: [ 474.041414][ T1657] __schedule+0x890/0x2030 [ 474.045905][ T1657] ? io_schedule_timeout+0x140/0x140 [ 474.051982][ T1657] schedule+0xcf/0x270 [ 474.056077][ T1657] schedule_preempt_disabled+0xf/0x20 [ 474.062042][ T1657] __mutex_lock+0x81a/0x1110 [ 474.066731][ T1657] ? blkdev_put+0x30/0x520 [ 474.071975][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 474.080684][ T1657] ? do_raw_spin_lock+0x120/0x2b0 [ 474.085729][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 474.091977][ T1657] ? locks_check_ctx_file_list+0x1d/0x110 [ 474.098480][ T1657] ? _raw_spin_unlock+0x24/0x40 [ 474.103391][ T1657] ? locks_remove_file+0x30d/0x560 [ 474.110183][ T1657] blkdev_put+0x30/0x520 [ 474.114498][ T1657] blkdev_close+0x8c/0xb0 [ 474.119481][ T1657] __fput+0x283/0x920 [ 474.123524][ T1657] ? blkdev_put+0x520/0x520 [ 474.128946][ T1657] task_work_run+0xdd/0x190 [ 474.133514][ T1657] exit_to_user_mode_prepare+0x1f0/0x200 [ 474.142015][ T1657] syscall_exit_to_user_mode+0x38/0x260 [ 474.148034][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.153958][ T1657] RIP: 0033:0x45deb9 [ 474.158467][ T1657] Code: Unable to access opcode bytes at RIP 0x45de8f. [ 474.165424][ T1657] RSP: 002b:00007f40ea27fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.175471][ T1657] RAX: 0000000000000000 RBX: 0000000000012f00 RCX: 000000000045deb9 [ 474.184226][ T1657] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 474.193221][ T1657] RBP: 000000000118bf58 R08: 0000000000000000 R09: 0000000000000000 [ 474.202556][ T1657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 474.211697][ T1657] R13: 00007fffcb2c237f R14: 00007f40ea2809c0 R15: 000000000118bf2c [ 474.220571][ T1657] INFO: task syz-executor.3:10725 blocked for more than 143 seconds. [ 474.229213][ T1657] Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 474.236363][ T1657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.245973][ T1657] task:syz-executor.3 state:D stack:26816 pid:10725 ppid: 8499 flags:0x00004004 [ 474.257981][ T1657] Call Trace: [ 474.261314][ T1657] __schedule+0x890/0x2030 [ 474.265797][ T1657] ? io_schedule_timeout+0x140/0x140 [ 474.271330][ T1657] schedule+0xcf/0x270 [ 474.275427][ T1657] schedule_preempt_disabled+0xf/0x20 [ 474.280966][ T1657] __mutex_lock+0x81a/0x1110 [ 474.285578][ T1657] ? blkdev_put+0x30/0x520 [ 474.290358][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 474.295738][ T1657] ? do_raw_spin_lock+0x120/0x2b0 [ 474.300997][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 474.306042][ T1657] ? locks_check_ctx_file_list+0x1d/0x110 [ 474.311904][ T1657] ? _raw_spin_unlock+0x24/0x40 [ 474.316782][ T1657] ? locks_remove_file+0x30d/0x560 [ 474.322472][ T1657] blkdev_put+0x30/0x520 [ 474.326724][ T1657] blkdev_close+0x8c/0xb0 [ 474.333136][ T1657] __fput+0x283/0x920 [ 474.337227][ T1657] ? blkdev_put+0x520/0x520 [ 474.341927][ T1657] task_work_run+0xdd/0x190 [ 474.346744][ T1657] exit_to_user_mode_prepare+0x1f0/0x200 [ 474.353447][ T1657] syscall_exit_to_user_mode+0x38/0x260 [ 474.359630][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.365644][ T1657] RIP: 0033:0x45deb9 [ 474.370904][ T1657] Code: Unable to access opcode bytes at RIP 0x45de8f. [ 474.378644][ T1657] RSP: 002b:00007f40ea27fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.387314][ T1657] RAX: 0000000000000000 RBX: 0000000000012f00 RCX: 000000000045deb9 [ 474.396959][ T1657] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 474.405434][ T1657] RBP: 000000000118bf58 R08: 0000000000000000 R09: 0000000000000000 [ 474.414232][ T1657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 474.422649][ T1657] R13: 00007fffcb2c237f R14: 00007f40ea2809c0 R15: 000000000118bf2c [ 474.431211][ T1657] INFO: task syz-executor.3:10746 can't die for more than 143 seconds. [ 474.440727][ T1657] task:syz-executor.3 state:D stack:28536 pid:10746 ppid: 8499 flags:0x00000004 [ 474.450784][ T1657] Call Trace: [ 474.454326][ T1657] __schedule+0x890/0x2030 [ 474.459348][ T1657] ? io_schedule_timeout+0x140/0x140 [ 474.464694][ T1657] schedule+0xcf/0x270 [ 474.469308][ T1657] schedule_preempt_disabled+0xf/0x20 [ 474.475227][ T1657] __mutex_lock+0x81a/0x1110 [ 474.483308][ T1657] ? __blkdev_get+0x457/0x1870 [ 474.488365][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 474.493769][ T1657] ? down_write_nested+0x150/0x150 [ 474.499416][ T1657] ? get_gendisk+0xb5/0x6a0 [ 474.504396][ T1657] ? disk_block_events+0x1d/0x130 [ 474.509605][ T1657] __blkdev_get+0x457/0x1870 [ 474.514350][ T1657] ? freeze_bdev+0x250/0x250 [ 474.520498][ T1657] ? devcgroup_check_permission+0x1a8/0x420 [ 474.527061][ T1657] blkdev_get+0xd1/0x240 [ 474.531474][ T1657] blkdev_open+0x21d/0x2b0 [ 474.535969][ T1657] do_dentry_open+0x4b9/0x11b0 [ 474.540881][ T1657] ? blkdev_get_by_dev+0x70/0x70 [ 474.545913][ T1657] path_openat+0x1b9a/0x2730 [ 474.550909][ T1657] ? path_lookupat+0x830/0x830 [ 474.555705][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 474.561841][ T1657] do_filp_open+0x17e/0x3c0 [ 474.566393][ T1657] ? may_open_dev+0xf0/0xf0 [ 474.571044][ T1657] ? do_raw_spin_lock+0x120/0x2b0 [ 474.576092][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 474.581208][ T1657] ? _raw_spin_unlock+0x24/0x40 [ 474.586229][ T1657] ? __alloc_fd+0x28d/0x600 [ 474.592089][ T1657] do_sys_openat2+0x16d/0x420 [ 474.596843][ T1657] ? build_open_flags+0x650/0x650 [ 474.602708][ T1657] ? _copy_to_user+0xdc/0x150 [ 474.609380][ T1657] ? put_timespec64+0xcb/0x120 [ 474.614173][ T1657] ? ns_to_timespec64+0xc0/0xc0 [ 474.620467][ T1657] __x64_sys_open+0x119/0x1c0 [ 474.625734][ T1657] ? do_sys_open+0x140/0x140 [ 474.631511][ T1657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 474.637552][ T1657] do_syscall_64+0x2d/0x70 [ 474.641991][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.648038][ T1657] RIP: 0033:0x4179b1 [ 474.651957][ T1657] Code: Unable to access opcode bytes at RIP 0x417987. [ 474.659494][ T1657] RSP: 002b:00007f40ea25e820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 474.668100][ T1657] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 474.676111][ T1657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f40ea25e850 [ 474.684248][ T1657] RBP: 000000000118c008 R08: 000000000000000f R09: 0000000000000000 [ 474.693543][ T1657] R10: 00007f40ea25f9d0 R11: 0000000000000293 R12: 000000000118bfd4 [ 474.702716][ T1657] R13: 00007fffcb2c237f R14: 00007f40ea25f9c0 R15: 000000000118bfd4 [ 474.711876][ T1657] INFO: task syz-executor.3:10746 blocked for more than 144 seconds. [ 474.720482][ T1657] Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 474.728150][ T1657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.736854][ T1657] task:syz-executor.3 state:D stack:28536 pid:10746 ppid: 8499 flags:0x00000004 [ 474.747498][ T1657] Call Trace: [ 474.750857][ T1657] __schedule+0x890/0x2030 [ 474.755954][ T1657] ? io_schedule_timeout+0x140/0x140 [ 474.761496][ T1657] schedule+0xcf/0x270 [ 474.765592][ T1657] schedule_preempt_disabled+0xf/0x20 [ 474.771097][ T1657] __mutex_lock+0x81a/0x1110 [ 474.775738][ T1657] ? __blkdev_get+0x457/0x1870 [ 474.780638][ T1657] ? mutex_lock_io_nested+0xf60/0xf60 [ 474.787174][ T1657] ? down_write_nested+0x150/0x150 [ 474.793317][ T1657] ? get_gendisk+0xb5/0x6a0 [ 474.798346][ T1657] ? disk_block_events+0x1d/0x130 [ 474.803517][ T1657] __blkdev_get+0x457/0x1870 [ 474.810562][ T1657] ? freeze_bdev+0x250/0x250 [ 474.815360][ T1657] ? devcgroup_check_permission+0x1a8/0x420 [ 474.822391][ T1657] blkdev_get+0xd1/0x240 [ 474.826658][ T1657] blkdev_open+0x21d/0x2b0 [ 474.832391][ T1657] do_dentry_open+0x4b9/0x11b0 [ 474.837644][ T1657] ? blkdev_get_by_dev+0x70/0x70 [ 474.842606][ T1657] path_openat+0x1b9a/0x2730 [ 474.847219][ T1657] ? path_lookupat+0x830/0x830 [ 474.853800][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 474.860258][ T1657] do_filp_open+0x17e/0x3c0 [ 474.865097][ T1657] ? may_open_dev+0xf0/0xf0 [ 474.869802][ T1657] ? do_raw_spin_lock+0x120/0x2b0 [ 474.874843][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 474.881041][ T1657] ? _raw_spin_unlock+0x24/0x40 [ 474.886034][ T1657] ? __alloc_fd+0x28d/0x600 [ 474.891184][ T1657] do_sys_openat2+0x16d/0x420 [ 474.896202][ T1657] ? build_open_flags+0x650/0x650 [ 474.901483][ T1657] ? _copy_to_user+0xdc/0x150 [ 474.906318][ T1657] ? put_timespec64+0xcb/0x120 [ 474.911410][ T1657] ? ns_to_timespec64+0xc0/0xc0 [ 474.916391][ T1657] __x64_sys_open+0x119/0x1c0 [ 474.922704][ T1657] ? do_sys_open+0x140/0x140 [ 474.927346][ T1657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 474.934219][ T1657] do_syscall_64+0x2d/0x70 [ 474.940846][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.947213][ T1657] RIP: 0033:0x4179b1 [ 474.951309][ T1657] Code: Unable to access opcode bytes at RIP 0x417987. [ 474.958602][ T1657] RSP: 002b:00007f40ea25e820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 474.967520][ T1657] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004179b1 [ 474.975809][ T1657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f40ea25e850 [ 474.984485][ T1657] RBP: 000000000118c008 R08: 000000000000000f R09: 0000000000000000 [ 474.992612][ T1657] R10: 00007f40ea25f9d0 R11: 0000000000000293 R12: 000000000118bfd4 [ 475.000748][ T1657] R13: 00007fffcb2c237f R14: 00007f40ea25f9c0 R15: 000000000118bfd4 [ 475.009985][ T1657] INFO: task systemd-udevd:10743 blocked for more than 144 seconds. [ 475.018152][ T1657] Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 475.025270][ T1657] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.035625][ T1657] task:systemd-udevd state:D stack:26488 pid:10743 ppid: 4901 flags:0x00004100 [ 475.046048][ T1657] Call Trace: [ 475.050640][ T1657] __schedule+0x890/0x2030 [ 475.055135][ T1657] ? io_schedule_timeout+0x140/0x140 [ 475.061197][ T1657] ? preempt_schedule_thunk+0x16/0x18 [ 475.067074][ T1657] ? preempt_schedule_common+0x59/0xc0 [ 475.073802][ T1657] schedule+0xcf/0x270 [ 475.078507][ T1657] io_schedule+0xb5/0x120 [ 475.082932][ T1657] wait_on_page_bit_common+0x424/0xeb0 [ 475.089009][ T1657] ? find_get_pages_contig+0x920/0x920 [ 475.094855][ T1657] ? end_buffer_async_read_io+0x2f0/0x2f0 [ 475.101283][ T1657] ? __filemap_set_wb_err+0x240/0x240 [ 475.106779][ T1657] ? __page_cache_alloc+0x10d/0x360 [ 475.112148][ T1657] do_read_cache_page+0x957/0x1390 [ 475.117295][ T1657] read_part_sector+0xf6/0x5b0 [ 475.122227][ T1657] adfspart_check_ICS+0x9d/0xc90 [ 475.127250][ T1657] ? pointer+0x930/0x930 [ 475.132411][ T1657] ? rcu_read_lock_sched_held+0x3a/0x70 [ 475.141565][ T1657] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 475.146905][ T1657] ? snprintf+0xbb/0xf0 [ 475.151210][ T1657] ? vsprintf+0x30/0x30 [ 475.155409][ T1657] ? adfspart_check_ADFS+0x7f0/0x7f0 [ 475.160848][ T1657] blk_add_partitions+0x456/0xe40 [ 475.166210][ T1657] bdev_disk_changed+0x288/0x580 [ 475.171323][ T1657] __blkdev_get+0xee4/0x1870 [ 475.175934][ T1657] ? freeze_bdev+0x250/0x250 [ 475.180675][ T1657] ? devcgroup_check_permission+0x1a8/0x420 [ 475.186590][ T1657] blkdev_get+0xd1/0x240 [ 475.191070][ T1657] blkdev_open+0x21d/0x2b0 [ 475.195533][ T1657] do_dentry_open+0x4b9/0x11b0 [ 475.200441][ T1657] ? blkdev_get_by_dev+0x70/0x70 [ 475.205413][ T1657] path_openat+0x1b9a/0x2730 [ 475.210231][ T1657] ? path_lookupat+0x830/0x830 [ 475.215224][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 475.221321][ T1657] do_filp_open+0x17e/0x3c0 [ 475.225849][ T1657] ? may_open_dev+0xf0/0xf0 [ 475.230525][ T1657] ? do_raw_spin_lock+0x120/0x2b0 [ 475.235570][ T1657] ? rwlock_bug.part.0+0x90/0x90 [ 475.240657][ T1657] ? _raw_spin_unlock+0x24/0x40 [ 475.245521][ T1657] ? __alloc_fd+0x28d/0x600 [ 475.252439][ T1657] do_sys_openat2+0x16d/0x420 [ 475.257190][ T1657] ? finish_task_switch.isra.0+0x18c/0xb40 [ 475.263756][ T1657] ? build_open_flags+0x650/0x650 [ 475.270481][ T1657] ? __schedule+0x898/0x2030 [ 475.275117][ T1657] __x64_sys_open+0x119/0x1c0 [ 475.280239][ T1657] ? do_sys_open+0x140/0x140 [ 475.284897][ T1657] ? __secure_computing+0x104/0x360 [ 475.290549][ T1657] do_syscall_64+0x2d/0x70 [ 475.295020][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.301128][ T1657] RIP: 0033:0x7fc97c554840 [ 475.305553][ T1657] Code: Unable to access opcode bytes at RIP 0x7fc97c554816. [ 475.313101][ T1657] RSP: 002b:00007ffe2612a0a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 475.321765][ T1657] RAX: ffffffffffffffda RBX: 000055d3a57240c0 RCX: 00007fc97c554840 [ 475.333546][ T1657] RDX: 000055d3a4a69fe3 RSI: 00000000000a0800 RDI: 000055d3a5714670 [ 475.342684][ T1657] RBP: 00007ffe2612a220 R08: 000055d3a4a69670 R09: 0000000000000010 [ 475.350956][ T1657] R10: 000055d3a4a69d0c R11: 0000000000000246 R12: 00007ffe2612a170 [ 475.361474][ T1657] R13: 000055d3a5714690 R14: 0000000000000003 R15: 000000000000000e [ 475.370604][ T1657] [ 475.370604][ T1657] Showing all locks held in the system: [ 475.378536][ T1657] 1 lock held by ksoftirqd/0/10: [ 475.383494][ T1657] #0: ffff8880b9e34f98 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x217/0x2030 [ 475.392572][ T1657] 1 lock held by khungtaskd/1657: [ 475.398885][ T1657] #0: ffffffff8b339ca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 475.409029][ T1657] 1 lock held by in:imklog/8190: [ 475.414155][ T1657] #0: ffff88801ddd2870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 475.423455][ T1657] 1 lock held by syz-executor.3/10725: [ 475.429096][ T1657] #0: ffff88814801db80 (&bdev->bd_mutex){+.+.}-{3:3}, at: blkdev_put+0x30/0x520 [ 475.438422][ T1657] 1 lock held by syz-executor.3/10746: [ 475.443888][ T1657] #0: ffff88814801db80 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 [ 475.453622][ T1657] 1 lock held by systemd-udevd/10743: [ 475.459156][ T1657] #0: ffff88814801db80 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x457/0x1870 [ 475.469879][ T1657] [ 475.472973][ T1657] ============================================= [ 475.472973][ T1657] [ 475.481628][ T1657] NMI backtrace for cpu 1 [ 475.485975][ T1657] CPU: 1 PID: 1657 Comm: khungtaskd Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 475.495534][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.505603][ T1657] Call Trace: [ 475.508952][ T1657] dump_stack+0x107/0x163 [ 475.513315][ T1657] nmi_cpu_backtrace.cold+0x44/0xd7 [ 475.518580][ T1657] ? lapic_can_unplug_cpu+0x80/0x80 [ 475.523779][ T1657] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 475.529768][ T1657] watchdog+0xd89/0xf30 [ 475.533937][ T1657] ? trace_sched_process_hang+0x280/0x280 [ 475.539675][ T1657] kthread+0x3af/0x4a0 [ 475.543751][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 475.549656][ T1657] ret_from_fork+0x1f/0x30 [ 475.554396][ T1657] Sending NMI from CPU 1 to CPUs 0: [ 475.560697][ T1657] NMI backtrace for cpu 0 [ 475.560707][ T1657] CPU: 0 PID: 8191 Comm: rs:main Q:Reg Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 475.560715][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.560720][ T1657] RIP: 0010:__lock_acquire+0x231/0x5c00 [ 475.560735][ T1657] Code: 7c 24 18 00 0f 85 b6 0c 00 00 48 8b 44 24 30 0f b7 4c 24 08 4e 8d 24 10 49 8d 44 24 20 66 81 e1 ff 1f 48 89 c2 48 89 44 24 28 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 84 d2 74 09 [ 475.560741][ T1657] RSP: 0018:ffffc90003a7f368 EFLAGS: 00000002 [ 475.560755][ T1657] RAX: ffff8880208a5940 RBX: 0000000000000000 RCX: 000000000000002c [ 475.560763][ T1657] RDX: ffff8880208a5940 RSI: 1ffff11004114b23 RDI: ffff8880208a5918 [ 475.560769][ T1657] RBP: ffff8880208a4f80 R08: 0000000000000001 R09: 0000000000000000 [ 475.560776][ T1657] R10: 0000000000000078 R11: 0000000000000000 R12: ffff8880208a5920 [ 475.560783][ T1657] R13: 0000000000000000 R14: ffffffff8b339ca0 R15: 0000000000000002 [ 475.560790][ T1657] FS: 00007f2cdbf30700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 475.560796][ T1657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.560803][ T1657] CR2: 00007f5526c73000 CR3: 000000002554d000 CR4: 00000000001506f0 [ 475.560810][ T1657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 475.560817][ T1657] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 475.560821][ T1657] Call Trace: [ 475.560825][ T1657] ? mark_lock+0xf7/0x24c0 [ 475.560830][ T1657] ? lock_chain_count+0x20/0x20 [ 475.560836][ T1657] ? rcu_read_lock_sched_held+0x3a/0x70 [ 475.560841][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 475.560846][ T1657] lock_acquire+0x2a3/0x8c0 [ 475.560851][ T1657] ? ext4_get_group_desc+0xe5/0x4e0 [ 475.560856][ T1657] ? lock_release+0x710/0x710 [ 475.560861][ T1657] ? lock_chain_count+0x20/0x20 [ 475.560865][ T1657] ? lock_chain_count+0x20/0x20 [ 475.560870][ T1657] ext4_get_group_desc+0x11c/0x4e0 [ 475.560876][ T1657] ? ext4_get_group_desc+0xe5/0x4e0 [ 475.560881][ T1657] __ext4_get_inode_loc+0x1b3/0x1130 [ 475.560886][ T1657] ? __lock_acquire+0xbe0/0x5c00 [ 475.560890][ T1657] ? ext4_da_get_block_prep+0x1180/0x1180 [ 475.560896][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 475.560901][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 475.560905][ T1657] ext4_get_inode_loc+0xf3/0x1b0 [ 475.560909][ T1657] ? ext4_inode_attach_jinode+0x230/0x230 [ 475.560912][ T1657] ext4_reserve_inode_write+0xc6/0x230 [ 475.560915][ T1657] ? ext4_dirty_inode+0xf3/0x130 [ 475.560918][ T1657] __ext4_mark_inode_dirty+0x178/0x8a0 [ 475.560922][ T1657] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 475.560925][ T1657] ? ext4_dirty_inode+0xbc/0x130 [ 475.560928][ T1657] ? ext4_journal_check_start+0x1ae/0x290 [ 475.560932][ T1657] ? __ext4_journal_start_sb+0x1f1/0x4a0 [ 475.560934][ T1657] ext4_dirty_inode+0xf3/0x130 [ 475.560937][ T1657] ? ext4_setattr+0x1ff0/0x1ff0 [ 475.560941][ T1657] __mark_inode_dirty+0x888/0x1190 [ 475.560947][ T1657] generic_write_end+0x316/0x4f0 [ 475.560950][ T1657] ext4_da_write_end+0x20f/0xb20 [ 475.560953][ T1657] generic_perform_write+0x2c0/0x4f0 [ 475.560957][ T1657] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 475.560960][ T1657] ? rwsem_down_read_slowpath+0xc90/0xc90 [ 475.560963][ T1657] ext4_buffered_write_iter+0x244/0x4d0 [ 475.560966][ T1657] ext4_file_write_iter+0x422/0x1400 [ 475.560969][ T1657] ? __lock_acquire+0x16c4/0x5c00 [ 475.560972][ T1657] ? ext4_buffered_write_iter+0x4d0/0x4d0 [ 475.560981][ T1657] ? aa_path_link+0x2f0/0x2f0 [ 475.560984][ T1657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 475.560987][ T1657] new_sync_write+0x426/0x650 [ 475.560990][ T1657] ? new_sync_read+0x6e0/0x6e0 [ 475.560993][ T1657] ? lock_release+0x710/0x710 [ 475.560996][ T1657] ? apparmor_file_permission+0x26e/0x4e0 [ 475.560999][ T1657] vfs_write+0x791/0xa30 [ 475.561001][ T1657] ksys_write+0x12d/0x250 [ 475.561004][ T1657] ? __ia32_sys_read+0xb0/0xb0 [ 475.561008][ T1657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 475.561011][ T1657] do_syscall_64+0x2d/0x70 [ 475.561014][ T1657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.561017][ T1657] RIP: 0033:0x7f2cde9741cd [ 475.561027][ T1657] Code: c2 20 00 00 75 10 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ae fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 f7 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 475.561030][ T1657] RSP: 002b:00007f2cdbf2f590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 475.561038][ T1657] RAX: ffffffffffffffda RBX: 00007f2cd0029710 RCX: 00007f2cde9741cd [ 475.561043][ T1657] RDX: 0000000000000451 RSI: 00007f2cd0029710 RDI: 0000000000000009 [ 475.561047][ T1657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.561052][ T1657] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f2cd0029490 [ 475.561056][ T1657] R13: 00007f2cdbf2f5b0 R14: 000055d298a737c0 R15: 0000000000000451 [ 475.562340][ T1657] Kernel panic - not syncing: hung_task: blocked tasks [ 476.036914][ T1657] CPU: 1 PID: 1657 Comm: khungtaskd Not tainted 5.10.0-rc4-next-20201120-syzkaller #0 [ 476.046471][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.056549][ T1657] Call Trace: [ 476.059850][ T1657] dump_stack+0x107/0x163 [ 476.064239][ T1657] panic+0x306/0x73d [ 476.068153][ T1657] ? __warn_printk+0xf3/0xf3 [ 476.072759][ T1657] ? lapic_can_unplug_cpu+0x80/0x80 [ 476.077970][ T1657] ? preempt_schedule_thunk+0x16/0x18 [ 476.083399][ T1657] ? watchdog.cold+0x22d/0x248 [ 476.088177][ T1657] ? watchdog+0xc59/0xf30 [ 476.092535][ T1657] watchdog.cold+0x23e/0x248 [ 476.097154][ T1657] ? trace_sched_process_hang+0x280/0x280 [ 476.102906][ T1657] kthread+0x3af/0x4a0 [ 476.107022][ T1657] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 476.113034][ T1657] ret_from_fork+0x1f/0x30 [ 476.118132][ T1657] Kernel Offset: disabled [ 476.122478][ T1657] Rebooting in 86400 seconds..