[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. 2020/07/13 11:15:41 fuzzer started 2020/07/13 11:15:41 dialing manager at 10.128.0.26:33519 2020/07/13 11:15:58 syscalls: 3167 2020/07/13 11:15:58 code coverage: enabled 2020/07/13 11:15:58 comparison tracing: enabled 2020/07/13 11:15:58 extra coverage: enabled 2020/07/13 11:15:58 setuid sandbox: enabled 2020/07/13 11:15:58 namespace sandbox: enabled 2020/07/13 11:15:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/13 11:15:58 fault injection: enabled 2020/07/13 11:15:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/13 11:15:58 net packet injection: enabled 2020/07/13 11:15:58 net device setup: enabled 2020/07/13 11:15:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/13 11:15:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/13 11:15:58 USB emulation: enabled 11:17:56 executing program 0: clone(0x3a3dd400a010a701, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000340)=""/142, 0x38, 0x8e, 0x8}, 0x20) syzkaller login: [ 206.394034][ T6846] IPVS: ftp: loaded support on port[0] = 21 11:17:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041284, &(0x7f0000000380)) [ 206.539770][ T6846] chnl_net:caif_netlink_parms(): no params data found [ 206.668568][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.676940][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.689114][ T6846] device bridge_slave_0 entered promiscuous mode [ 206.699945][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.708580][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.717044][ T6846] device bridge_slave_1 entered promiscuous mode [ 206.754804][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.769956][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.805392][ T6846] team0: Port device team_slave_0 added [ 206.815191][ T6846] team0: Port device team_slave_1 added [ 206.847884][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.855350][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.883406][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.897045][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.905351][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.933325][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 11:17:57 executing program 2: r0 = epoll_create(0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) [ 206.953130][ T6980] IPVS: ftp: loaded support on port[0] = 21 [ 207.010228][ T6846] device hsr_slave_0 entered promiscuous mode [ 207.086018][ T6846] device hsr_slave_1 entered promiscuous mode 11:17:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc3376003639405cb4aef12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bfd983f79e65199615607a4ebe404180bab762ccdfe6ad0676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157d", 0x88}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 207.265021][ T7006] IPVS: ftp: loaded support on port[0] = 21 [ 207.641552][ T7086] IPVS: ftp: loaded support on port[0] = 21 11:17:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000000)=""/132, 0x2a, 0x84, 0x8}, 0x20) [ 207.728377][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 207.878847][ T7006] chnl_net:caif_netlink_parms(): no params data found 11:17:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300d23b7}, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) [ 208.082833][ T6846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.178184][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.186031][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.198694][ T6980] device bridge_slave_0 entered promiscuous mode [ 208.224269][ T6846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.294841][ T6846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.350503][ T6846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.408177][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.416611][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.420537][ T7293] IPVS: ftp: loaded support on port[0] = 21 [ 208.428829][ T6980] device bridge_slave_1 entered promiscuous mode [ 208.480641][ T7301] IPVS: ftp: loaded support on port[0] = 21 [ 208.554813][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.598932][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.606504][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.616892][ T7006] device bridge_slave_0 entered promiscuous mode [ 208.630093][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.685883][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.693034][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.702202][ T7006] device bridge_slave_1 entered promiscuous mode [ 208.724830][ T6980] team0: Port device team_slave_0 added [ 208.751778][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 208.763969][ T6980] team0: Port device team_slave_1 added [ 208.820639][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.849443][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.861529][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.892287][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.909313][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.918400][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.945627][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.978393][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.121871][ T7006] team0: Port device team_slave_0 added [ 209.221465][ T6980] device hsr_slave_0 entered promiscuous mode [ 209.273974][ T6980] device hsr_slave_1 entered promiscuous mode [ 209.313435][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.321222][ T6980] Cannot create hsr debugfs directory [ 209.329276][ T7006] team0: Port device team_slave_1 added [ 209.426405][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 209.447089][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 209.465029][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.472032][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.499914][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.517890][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.525724][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.553003][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.566144][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.573967][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.581865][ T7086] device bridge_slave_0 entered promiscuous mode [ 209.621729][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.630081][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.638519][ T7086] device bridge_slave_1 entered promiscuous mode [ 209.736434][ T7006] device hsr_slave_0 entered promiscuous mode [ 209.793918][ T7006] device hsr_slave_1 entered promiscuous mode [ 209.833522][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.841190][ T7006] Cannot create hsr debugfs directory [ 209.906242][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.957568][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.055469][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.064355][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.092673][ T7301] device bridge_slave_0 entered promiscuous mode [ 210.118735][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.129865][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.139607][ T7293] device bridge_slave_0 entered promiscuous mode [ 210.148829][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.158010][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.167055][ T7301] device bridge_slave_1 entered promiscuous mode [ 210.194566][ T7086] team0: Port device team_slave_0 added [ 210.211343][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.218860][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.228592][ T7293] device bridge_slave_1 entered promiscuous mode [ 210.266952][ T7086] team0: Port device team_slave_1 added [ 210.290981][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.338597][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.361576][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.387971][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.407797][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.416011][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.444081][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.477710][ T6980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.551869][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.559843][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.586790][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.612000][ T6980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.699469][ T7293] team0: Port device team_slave_0 added [ 210.714507][ T7301] team0: Port device team_slave_0 added [ 210.722892][ T7293] team0: Port device team_slave_1 added [ 210.738551][ T6980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.840266][ T7301] team0: Port device team_slave_1 added [ 210.870691][ T6980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.982143][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.989404][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.022103][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.040790][ T6846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.057394][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.065097][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.092344][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.145914][ T7086] device hsr_slave_0 entered promiscuous mode [ 211.183828][ T7086] device hsr_slave_1 entered promiscuous mode [ 211.234782][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.242439][ T7086] Cannot create hsr debugfs directory [ 211.249648][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.256832][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.282873][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.315550][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.322656][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.350407][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.449726][ T7293] device hsr_slave_0 entered promiscuous mode [ 211.507019][ T7293] device hsr_slave_1 entered promiscuous mode [ 211.583365][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.590952][ T7293] Cannot create hsr debugfs directory [ 211.606281][ T7006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.657781][ T7006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.712618][ T7006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.779153][ T7006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.882881][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.892236][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.946052][ T7301] device hsr_slave_0 entered promiscuous mode [ 211.994492][ T7301] device hsr_slave_1 entered promiscuous mode [ 212.033485][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.041211][ T7301] Cannot create hsr debugfs directory [ 212.058886][ T6846] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.097589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.118711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.129413][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.136877][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.232808][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.241541][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.252429][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.264811][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.271946][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.327599][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.340703][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.430522][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.442227][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.452552][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.462020][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.472385][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.540027][ T6846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.552085][ T6846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.565370][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.575289][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.585204][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.594586][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.602916][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.668451][ T7086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.709463][ T7086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.756998][ T7086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.816873][ T7086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.896660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.914903][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.979689][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.995472][ T7293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.055737][ T7293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.143378][ T7293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.194888][ T7293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.238584][ T7301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.323143][ T7301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.375642][ T7301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.453022][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.463069][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.487177][ T7301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.611408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.621949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.671899][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.690078][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.699583][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.725846][ T6846] device veth0_vlan entered promiscuous mode [ 213.752067][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.771405][ T6846] device veth1_vlan entered promiscuous mode [ 213.808539][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.826244][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.840333][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.866962][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.882849][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.891791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.903874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.931797][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.961543][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.978982][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.992225][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.999427][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.012378][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.033779][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.043110][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.065049][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.072177][ T7102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.130165][ T6846] device veth0_macvtap entered promiscuous mode [ 214.147579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.167648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.182765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.192764][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.200154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.208867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.219569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.229841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.238531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.263676][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.277760][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.286940][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.294453][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.306694][ T6846] device veth1_macvtap entered promiscuous mode [ 214.320624][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.362098][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.384183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.402040][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.433161][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.459469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.472939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.492948][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.535166][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.557871][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.571136][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.581995][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.592354][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.601821][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.610772][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.620323][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.629630][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.648972][ T6846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.667228][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.685525][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.698079][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.712611][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.721720][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.731256][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.740467][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.749557][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.759155][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.789182][ T6846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.803193][ T6846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.812392][ T6846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.826855][ T6846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.847193][ T6980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.870220][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.883625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.892190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.903035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.914359][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.922741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.935944][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.944890][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.951946][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.967676][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.012015][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.027730][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.039135][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.049634][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.056904][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.066253][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.076496][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.098654][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.176369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.198768][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.211113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.220401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.232572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.362434][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.385382][ T8176] BPF:[1] VAR . [ 215.389090][ T8176] BPF:type_id=2 linkage=0 [ 215.393630][ T8176] BPF: [ 215.396495][ T8176] BPF:Loop detected [ 215.400392][ T8176] BPF: [ 215.400392][ T8176] [ 215.426556][ T8177] BPF:[1] VAR . [ 215.430339][ T8177] BPF:type_id=2 linkage=0 [ 215.436112][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.444712][ T8177] BPF: [ 215.447621][ T8177] BPF:Loop detected [ 215.451543][ T8177] BPF: [ 215.451543][ T8177] [ 215.454555][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.474154][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.482797][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.493161][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.502112][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 11:18:05 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 215.530177][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.557854][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.579556][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.603604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.609651][ C1] hrtimer: interrupt took 35707 ns [ 215.611340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.639568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.655389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.670497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.677889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.699548][ T7086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.818941][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.831186][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.845156][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.870976][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.878324][ T2718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.933965][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.976343][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.985952][ T8182] ptrace attach of "/root/syz-executor.0"[8179] was attempted by "/root/syz-executor.0"[8182] [ 216.005061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.024322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:18:06 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 216.100143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.117678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.136389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.167068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.187390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.201894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:18:06 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 216.302628][ T8190] ptrace attach of "/root/syz-executor.0"[8189] was attempted by "/root/syz-executor.0"[8190] [ 216.309911][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.358859][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.369870][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.386787][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.404331][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.420633][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.486380][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.500358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.510640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.519629][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.535413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.544749][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.551889][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.561362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.570802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.580615][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.587907][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.597173][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.606440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.616513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.626053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.635841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.645648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.670755][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:18:06 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 216.684575][ T8195] ptrace attach of "/root/syz-executor.0"[8194] was attempted by "/root/syz-executor.0"[8195] [ 216.708503][ T7006] device veth0_vlan entered promiscuous mode [ 216.772673][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.782768][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.802258][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.846266][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.859695][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.931045][ T7006] device veth1_vlan entered promiscuous mode [ 216.936733][ T8198] ptrace attach of "/root/syz-executor.0"[8197] was attempted by "/root/syz-executor.0"[8198] [ 216.990260][ T6980] device veth0_vlan entered promiscuous mode [ 217.019865][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 11:18:07 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 217.039186][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.053105][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.064021][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.073038][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.092709][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.131896][ T6980] device veth1_vlan entered promiscuous mode [ 217.147421][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.156981][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.166572][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.175520][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.185110][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.195216][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.207519][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.254595][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.264544][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 11:18:07 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 217.302825][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.316999][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.328297][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.338189][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.349132][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.378035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.403057][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.556266][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.581214][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.591890][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.615981][ T7006] device veth0_macvtap entered promiscuous mode [ 217.642530][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 11:18:07 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 217.661441][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.682739][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.703457][ T7086] device veth0_vlan entered promiscuous mode [ 217.740161][ T7006] device veth1_macvtap entered promiscuous mode [ 217.749464][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.768164][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.782012][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.800100][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.812272][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.841475][ T6980] device veth0_macvtap entered promiscuous mode [ 217.879723][ T7086] device veth1_vlan entered promiscuous mode [ 217.901769][ T8219] ptrace attach of "/root/syz-executor.0"[8218] was attempted by "/root/syz-executor.0"[8219] [ 217.954389][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.000955][ T6980] device veth1_macvtap entered promiscuous mode [ 218.017931][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.034667][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.052777][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.062576][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.082901][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.094773][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.109646][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.122137][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.139258][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.155606][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.169314][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.180401][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.189093][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.199288][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.209884][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.220123][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.260705][ T7006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.278566][ T7006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.290378][ T7006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.300969][ T7006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.329265][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.340452][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.369548][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.379913][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.389915][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.399691][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.499898][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.518796][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.530399][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.545386][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.559596][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.616814][ T7293] device veth0_vlan entered promiscuous mode [ 218.632537][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.668974][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.682633][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.700570][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.711014][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.736219][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.750769][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.771316][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.790506][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.816943][ T7086] device veth0_macvtap entered promiscuous mode [ 218.833973][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.851976][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.884399][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.904162][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.914016][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.924728][ T6980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.935134][ T6980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.948542][ T6980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.968350][ T6980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.016484][ T7293] device veth1_vlan entered promiscuous mode [ 219.030147][ T7086] device veth1_macvtap entered promiscuous mode [ 219.097261][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.108146][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.118984][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.128197][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.137629][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.152344][ T7301] device veth0_vlan entered promiscuous mode [ 219.170672][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.182641][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.196883][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.208091][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.218361][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.229081][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.241279][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.314429][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.329977][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.341101][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.352433][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.362568][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.374021][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.384142][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.396586][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.408945][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.427677][ T7301] device veth1_vlan entered promiscuous mode [ 219.446288][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.458275][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.471692][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.549042][ T7086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.566781][ T7086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 11:18:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041284, &(0x7f0000000380)) 11:18:09 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) [ 219.609918][ T7086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.634782][ T7086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.686688][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.698525][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.750709][ T7293] device veth0_macvtap entered promiscuous mode [ 219.888823][ T8242] ptrace attach of "/root/syz-executor.0"[8239] was attempted by "/root/syz-executor.0"[8242] [ 219.917099][ T7293] device veth1_macvtap entered promiscuous mode [ 220.037713][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.052689][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 11:18:10 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 220.089160][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.131314][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.185198][ T7301] device veth0_macvtap entered promiscuous mode [ 220.226832][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.249815][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.267719][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.281554][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.301625][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.321744][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.343382][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.362544][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.379802][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.397085][ T7301] device veth1_macvtap entered promiscuous mode [ 220.409346][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.431688][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.440544][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.450050][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.467597][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.479911][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.490555][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.501446][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.511417][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.522621][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.532578][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.543221][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.557245][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.577616][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.588201][ T7997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.602274][ T7293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.615766][ T7293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.626220][ T7293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.635855][ T7293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.669804][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.680661][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.691173][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.701833][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.712099][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.725065][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.736907][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.749262][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.759818][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.770895][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.785502][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.827084][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.836339][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.851661][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.866481][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.878375][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.890110][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.900553][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.911496][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.921973][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.933095][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.944267][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.956972][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.969102][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.999334][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.009295][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.020781][ T7301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.038420][ T7301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.048471][ T7301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.057387][ T7301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 11:18:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041284, &(0x7f0000000380)) [ 221.267199][ T8259] BPF:[1] INT (anon) [ 221.271546][ T8259] BPF: [ 221.282167][ T8259] BPF:Invalid int_data:12000000 [ 221.288413][ T8261] BPF:[1] INT (anon) [ 221.288600][ T8259] BPF: [ 221.288600][ T8259] [ 221.292358][ T8261] BPF: [ 221.292373][ T8261] BPF:Invalid int_data:12000000 [ 221.292380][ T8261] BPF: [ 221.292380][ T8261] [ 221.435828][ T8268] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop5 scanned by syz-executor.5 (8268) [ 221.478688][ T8268] BTRFS error (device loop5): superblock checksum mismatch [ 221.489675][ T8268] BTRFS error (device loop5): open_ctree failed [ 221.568485][ T8275] BTRFS error (device loop5): superblock checksum mismatch [ 221.584791][ T8275] BTRFS error (device loop5): open_ctree failed 11:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300d23b7}, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) 11:18:11 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) 11:18:11 executing program 2: r0 = epoll_create(0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 11:18:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000000)=""/132, 0x2a, 0x84, 0x8}, 0x20) 11:18:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 11:18:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041284, &(0x7f0000000380)) [ 221.743567][ T8289] BPF:[1] INT (anon) 11:18:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 11:18:11 executing program 2: r0 = epoll_create(0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 11:18:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000000)=""/132, 0x2a, 0x84, 0x8}, 0x20) 11:18:11 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x500, &(0x7f0000000300), 0x4) [ 221.767960][ T8289] BPF: [ 221.781362][ T8289] BPF:Invalid int_data:12000000 [ 221.798378][ T8289] BPF: [ 221.798378][ T8289] [ 221.830678][ T8294] BTRFS error (device loop5): superblock checksum mismatch [ 221.864795][ T8294] BTRFS error (device loop5): open_ctree failed 11:18:12 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x309280, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000680)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) ptrace$setopts(0x4206, r0, 0x0, 0x3) 11:18:12 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x500, &(0x7f0000000300), 0x4) [ 222.029497][ T8310] BPF:[1] INT (anon) [ 222.047391][ T8310] BPF: [ 222.060359][ T8310] BPF:Invalid int_data:12000000 11:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300d23b7}, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) 11:18:12 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 11:18:12 executing program 2: r0 = epoll_create(0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 11:18:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000000)=""/132, 0x2a, 0x84, 0x8}, 0x20) [ 222.084592][ T8310] BPF: [ 222.084592][ T8310] [ 222.241944][ T8323] BPF:[1] INT (anon) 11:18:12 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x500, &(0x7f0000000300), 0x4) 11:18:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000000000a000000000000000001000084000000000000000002"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) [ 222.280961][ T8323] BPF: 11:18:12 executing program 0: clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/129, 0xfffffffffffffcb9, 0x0, 0x0}, 0x70) [ 222.307852][ T8318] ptrace attach of "/root/syz-executor.0"[8315] was attempted by "/root/syz-executor.0"[8318] [ 222.316828][ T8323] BPF:Invalid int_data:12000000 11:18:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) [ 222.392730][ T8323] BPF: [ 222.392730][ T8323] 11:18:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0x0, r1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000900), 0x4) 11:18:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000000000a000000000000000001000084000000000000000002"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) [ 222.447693][ T8332] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 222.456783][ T8332] BPF: [ 222.462294][ T8332] BPF:Invalid member [ 222.469136][ T8332] BPF: [ 222.469136][ T8332] 11:18:12 executing program 0: clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/129, 0xfffffffffffffcb9, 0x0, 0x0}, 0x70) [ 222.499364][ T8326] BTRFS error (device loop5): superblock checksum mismatch [ 222.509843][ T8326] BTRFS error (device loop5): open_ctree failed 11:18:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) [ 222.592801][ T8346] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 222.612688][ T8346] BPF: [ 222.623691][ T8346] BPF:Invalid member [ 222.642612][ T8346] BPF: [ 222.642612][ T8346] 11:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300d23b7}, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) 11:18:12 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x500, &(0x7f0000000300), 0x4) 11:18:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000000000a000000000000000001000084000000000000000002"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) 11:18:12 executing program 0: clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/129, 0xfffffffffffffcb9, 0x0, 0x0}, 0x70) 11:18:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 11:18:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x63}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 222.770279][ T8360] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 222.780185][ T8359] BTRFS error (device loop5): superblock checksum mismatch [ 222.790144][ T8359] BTRFS error (device loop5): open_ctree failed 11:18:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)='\xbb\x02\xb1\x91^\x00\x00\x01\x00\x00\x00\x00\x00\x00\xfa\xe3\xa0\xd42\x90YJ\x89]\xad\x01\xc3\\:;\x99\xbck\xf9=\xfa\xe8HB\xf7\x92\x16\xbc\x11\xc4\xff\xa1\xea\xf9l', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="c5", 0x1}], 0x1, 0x840ee6) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11:18:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000000000a000000000000000001000084000000000000000002"], &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) [ 222.820190][ T8360] BPF: [ 222.823182][ T8360] BPF:Invalid member [ 222.829062][ T8360] BPF: [ 222.829062][ T8360] 11:18:13 executing program 0: clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/129, 0xfffffffffffffcb9, 0x0, 0x0}, 0x70) 11:18:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) [ 222.968925][ T8372] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=0 [ 223.030595][ T8372] BPF: [ 223.034789][ T8372] BPF:Invalid member [ 223.038708][ T8372] BPF: [ 223.038708][ T8372] 11:18:13 executing program 3: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) 11:18:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x63}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11:18:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x4, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xf8001}) 11:18:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:18:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x63}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11:18:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) [ 223.409828][ T8399] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:18:13 executing program 4: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:13 executing program 3: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) 11:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x4, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xf8001}) 11:18:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x63}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11:18:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:18:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) 11:18:14 executing program 4: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:14 executing program 3: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) 11:18:14 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 11:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x44}}, 0x0) 11:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x4, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xf8001}) 11:18:14 executing program 4: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:14 executing program 3: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x410400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:18:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) 11:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x44}}, 0x0) 11:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x4, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xf8001}) 11:18:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 11:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x44}}, 0x0) [ 224.586209][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:18:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x62) setresuid(0x0, r5, 0x0) setresuid(r5, r3, 0x0) [ 224.723642][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:18:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x63000000}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) 11:18:14 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11:18:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 11:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x44}}, 0x0) 11:18:15 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x0) [ 224.928512][ T8484] BPF: (anon) type_id=1 bitfield_size=99 bits_offset=0 11:18:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 11:18:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 224.974953][ T8484] BPF: [ 224.986459][ T8484] BPF:Invalid member bitfield_size [ 225.002649][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.037935][ T8484] BPF: [ 225.037935][ T8484] 11:18:15 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x0) [ 225.069043][ T8484] BPF: (anon) type_id=1 bitfield_size=99 bits_offset=0 [ 225.105708][ T8484] BPF: [ 225.120872][ T8484] BPF:Invalid member bitfield_size 11:18:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) [ 225.146211][ T8484] BPF: [ 225.146211][ T8484] 11:18:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x63000000}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) 11:18:15 executing program 0: syz_usb_connect(0x0, 0x642, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d847ae40991121007bb100000001090230060100200000090499"], 0x0) 11:18:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11:18:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 225.257200][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.310576][ T8508] BPF: (anon) type_id=1 bitfield_size=99 bits_offset=0 [ 225.326125][ T8508] BPF: [ 225.336288][ T8508] BPF:Invalid member bitfield_size 11:18:15 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x0) 11:18:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) [ 225.363835][ T8508] BPF: [ 225.363835][ T8508] 11:18:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x63000000}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) 11:18:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11:18:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 11:18:15 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x0) [ 225.530721][ T8523] BPF: (anon) type_id=1 bitfield_size=99 bits_offset=0 [ 225.543548][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.560290][ T8523] BPF: [ 225.565221][ T8153] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 225.576466][ T8523] BPF:Invalid member bitfield_size [ 225.600839][ T8523] BPF: [ 225.600839][ T8523] 11:18:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 11:18:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xa, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x63000000}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) 11:18:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) [ 225.788278][ T8534] BPF: (anon) type_id=1 bitfield_size=99 bits_offset=0 [ 225.802771][ T8534] BPF: [ 225.809822][ T8534] BPF:Invalid member bitfield_size [ 225.817549][ T8534] BPF: [ 225.817549][ T8534] [ 225.933521][ T8153] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 225.947987][ T8153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.967204][ T8153] usb 1-1: config 0 has no interface number 0 [ 225.977303][ T8153] usb 1-1: New USB device found, idVendor=1199, idProduct=0021, bcdDevice=b1.7b [ 225.991995][ T8153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.012383][ T8153] usb 1-1: config 0 descriptor?? [ 226.339488][ T8153] usb 1-1: string descriptor 0 read error: -71 [ 226.348148][ T8153] sierra 1-1:0.153: Sierra USB modem converter detected [ 226.393546][ T8153] usb 1-1: USB disconnect, device number 2 [ 226.410949][ T8153] sierra 1-1:0.153: device disconnected [ 227.070342][ T2718] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 227.473778][ T2718] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 227.482091][ T2718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.531638][ T2718] usb 1-1: config 0 has no interface number 0 [ 227.557632][ T2718] usb 1-1: New USB device found, idVendor=1199, idProduct=0021, bcdDevice=b1.7b [ 227.568387][ T2718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.592854][ T2718] usb 1-1: config 0 descriptor?? 11:18:18 executing program 0: syz_usb_connect(0x0, 0x642, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d847ae40991121007bb100000001090230060100200000090499"], 0x0) 11:18:18 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) 11:18:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x0, 0x401}}) 11:18:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 11:18:18 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 227.919772][ T2718] usb 1-1: string descriptor 0 read error: -71 [ 227.935463][ T2718] sierra 1-1:0.153: Sierra USB modem converter detected [ 227.966456][ T2718] usb 1-1: USB disconnect, device number 3 [ 227.982584][ T2718] sierra 1-1:0.153: device disconnected [ 228.006062][ T8583] tipc: Enabling of bearer rejected, failed to enable media 11:18:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x0, 0x401}}) 11:18:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @dev, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r2, r1) 11:18:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 228.110514][ T8594] tipc: Enabling of bearer rejected, failed to enable media 11:18:18 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) 11:18:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x0, 0x401}}) [ 228.261022][ T8592] binfmt_misc: Unknown parameter 'errors' 11:18:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) [ 228.491329][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 228.500584][ T8608] binfmt_misc: Unknown parameter 'errors' [ 228.523467][ T2718] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 228.920987][ T2718] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 228.930531][ T2718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.948167][ T2718] usb 1-1: config 0 has no interface number 0 [ 228.958168][ T2718] usb 1-1: New USB device found, idVendor=1199, idProduct=0021, bcdDevice=b1.7b [ 228.968975][ T2718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.982693][ T2718] usb 1-1: config 0 descriptor?? [ 229.274016][ T2718] usb 1-1: string descriptor 0 read error: -71 [ 229.301678][ T2718] sierra 1-1:0.153: Sierra USB modem converter detected [ 229.386898][ T2718] usb 1-1: USB disconnect, device number 4 [ 229.399191][ T2718] sierra 1-1:0.153: device disconnected 11:18:19 executing program 0: syz_usb_connect(0x0, 0x642, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d847ae40991121007bb100000001090230060100200000090499"], 0x0) 11:18:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x0, 0x401}}) 11:18:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 11:18:19 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) 11:18:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) 11:18:19 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) [ 229.868982][ T8650] tipc: Enabling of bearer rejected, failed to enable media 11:18:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 11:18:20 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) 11:18:20 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:20 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11:18:20 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x40) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) [ 230.150868][ T8668] tipc: Enabling of bearer rejected, failed to enable media [ 230.221931][ T8658] binfmt_misc: Unknown parameter 'errors' [ 230.234159][ T3900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.484807][ T8670] binfmt_misc: Unknown parameter 'errors' [ 230.613471][ T3900] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 230.622273][ T3900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.653324][ T3900] usb 1-1: config 0 has no interface number 0 [ 230.660017][ T3900] usb 1-1: New USB device found, idVendor=1199, idProduct=0021, bcdDevice=b1.7b [ 230.693310][ T3900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.727470][ T3900] usb 1-1: config 0 descriptor?? [ 231.003353][ T3900] usb 1-1: string descriptor 0 read error: -71 [ 231.019210][ T3900] sierra 1-1:0.153: Sierra USB modem converter detected [ 231.078328][ T3900] usb 1-1: USB disconnect, device number 5 [ 231.103777][ T3900] sierra 1-1:0.153: device disconnected 11:18:21 executing program 0: syz_usb_connect(0x0, 0x642, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d847ae40991121007bb100000001090230060100200000090499"], 0x0) 11:18:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) 11:18:21 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:21 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x40) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) 11:18:21 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11:18:21 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:21 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11:18:21 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x40) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) [ 231.934761][ T8720] binfmt_misc: Unknown parameter 'errors' 11:18:22 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 231.998856][ T8725] binfmt_misc: Unknown parameter 'errors' [ 232.013294][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd 11:18:22 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:22 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x0, 0x0) r0 = geteuid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f00000004c0)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='\x00', 0x0, 0x3, &(0x7f00000007c0)=[{&(0x7f00000003c0)}, {&(0x7f00000005c0)="d5bcf7d2418e7c40fc21598aa98853e4afc3ec748f02d2be8694c645b05b3925bb94068e07b6b5ec73ab4f80f2ac5bf03ebc6aad73f8cae7eb49428ba6b14c09eb37e1667d2d02fcc47f5d09e8e6311538f4fcb4b0fb12b7c76a3edc931123d989db4ff6cfef8989a790b803e872618f9242556ae7871d6244b0745fe87c386ba1b07f69ed9355237e95229a1a4ad769544a9258713b7fe24f6e7a63129895d905c7098a7a1d2e7e1e3f64a291ce39c92e9d33dbe4263efac49d70043ff705fa2e0e7e472372d700f015e016", 0xcc, 0x71}, {&(0x7f00000006c0)="dbe179e7436946361b30eac336c384ec845ce8282204284821cb2d1375344bb009afc294fdcf099b71316e3a8186c68fde3d0928a5435fd9cf79eed333c689282666753d9b4599f1ac5b8de75e8707eb8bbbbd7eaa0b234cd2935949a61e880f7deda908ce567b9640cf436ee106a55c00c9b13675a77e15d8b6fc00268a92b66b03cd670f9094fce5577c4af3fd6fc07c5de619c3fd10a944e6cfe3e3a9152b75e698944e59065b8ca9e56834a057b0077203e57637acd7828a77ebb2445b419305166fe5f74c589153937a547485b50a439ab550be4dfe52be8fb0f48a02e526f704d1e92e0848", 0xe8, 0x100}], 0x1104040, 0x0) creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000008c0)='exfat\x00', &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6, 0x9, &(0x7f0000000f40)=[{&(0x7f0000000980)="54e7ee6fa5e14b4c8b06bfc082b0ae835ebf4ff4733252cdc3a2c037ed4f2a49ed06c4465d758a8c287fdf8dbc8d9875e9112e5c72aa9a65bf6c697daea6b6bd2129", 0x42, 0x7ff}, {&(0x7f0000000a00)="0a08d3cf0a54be1d0f69542fd142c2bb6709e4f2e6f69a00f498cab615627d56848ac8519999bb270bda1ec8981a43202c15b8c5f462d742669da57f8ad702f90768bc995f7e4cd65b8edcd76d64430a032012e19421c63d3aac26326075ff", 0x5f, 0x9}, {&(0x7f0000000a80)="fa28d793ea1937127bcb9d4460fe72ff5fb321c9c6693b41a6b903a88281035fe5a334692011a4dc40fa93d876ec62be681298f8707482ac60c6a6902c31f7990ec695a7695592185b78622ffdbec28846dc1bdf3d1c0826c0993a4e3bdb89786d1fd12e764a788ec602133d7256cddf366d4f1cdd214843a17ecee5c3404fb1770d8f0468f909d5196c8545fb6237aa99b9cfb49e6f", 0x96, 0xfff}, {&(0x7f0000000b40)="e5e0007a55ca842005b2e7c5", 0xc, 0x22400000}, {&(0x7f0000000b80)="390a664e89f6c6c003f6c6aeedae835d1b037b04d38bc728a899a6404974b1f8057dde25fb9b7cea193a57158a6726dd328ebbbbd903b0caf80086d56c38be350dc3e9f62573115821a8422a9aafa3a983f03565fa86e7b5907fad1bf8b0940a2d395b9b5a87a8cff0ff10425d2e0b7583ae4e161f0eb2f37c6403e01a9a838af71057bf2cfc88888947cbea706de5e3d56167cdf22c", 0x96, 0x2}, {&(0x7f0000000c40)="45b8c552cfe3d64056a71895dd3780ebedada20e515df2a94b61d6ca3599b1d5648465112748734c2aa17e3f320a706c7288cdc1534412cb0fcbad8c958b62e6fb4869e5da3fb61f98095eb1ffebfbbaed26670074a93bd035d573ada79847c2c6e9d5140fb394c0970890de80506fac759c8223d27f4f5fb752396a9e5b861b572b3104d2", 0x85, 0x4}, {&(0x7f0000000d00)="574d238ee61681a1b27404a562c2b69b37e98f43c0d515838fe09a", 0x1b, 0x4}, {&(0x7f0000000d40)="37f3fba99c73ead3bb1aa65d035dcdd77ea6a0390f95968fe237e54ceca0a29763561aa5c801e714d06cc5853bfd8be1ed855673bc77d1c4fec71a03d1b8a236f72464e3fd265141e335f47870deff187926a4f055248f55bcd74d80caf6dbd976f2cff75cdcfd8907db5fc39aefb4b5b6d0321818f9f34bde2192a57317e228a4be5e5d7766a49cc7fdfbb4e89ccd0711bb532774a2dcfe21a8ef0703eaf720270ec4d927486bdd92ca2de7256e00c894102b448245642130c76d4757a164a7309f87dc712d660a6b36e73b1b1025ab8c", 0xd1, 0x1}, {0x0, 0x0, 0xc2}], 0x431, &(0x7f0000001040)={[{@errors_remount='errors=remount-ro'}, {@umask={'umask', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r0}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xaf,#[:'}}]}) 11:18:22 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x40) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) [ 232.403762][ T12] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 232.441082][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.565832][ T12] usb 1-1: config 0 has no interface number 0 [ 232.624206][ T12] usb 1-1: New USB device found, idVendor=1199, idProduct=0021, bcdDevice=b1.7b [ 232.649176][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.667571][ T8752] binfmt_misc: Unknown parameter 'errors' [ 232.781839][ T12] usb 1-1: config 0 descriptor?? [ 232.798510][ T8754] binfmt_misc: Unknown parameter 'errors' [ 233.143394][ T12] usb 1-1: string descriptor 0 read error: -71 [ 233.150827][ T12] sierra 1-1:0.153: Sierra USB modem converter detected [ 233.191270][ T12] usb 1-1: USB disconnect, device number 6 [ 233.216540][ T12] sierra 1-1:0.153: device disconnected 11:18:23 executing program 3: prctl$PR_SET_SECCOMP(0x34, 0x1, 0x0) 11:18:23 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11:18:23 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='resize=0x']) 11:18:23 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11:18:23 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x7, 0x0, 0xa0) 11:18:23 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000004105000600200000000a00000000000000000500e5000807ff00001f00000000000009200000000000020001000000000000000002000098a805000500000000000a"], 0x80}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x6c}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) 11:18:23 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x7, 0x0, 0xa0) 11:18:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x7, 0x0, 0xa0) [ 233.877511][ T8797] REISERFS warning (device loop4): super-6507 reiserfs_parse_options: bad value 0x for -oresize [ 233.877511][ T8797] 11:18:24 executing program 3: prctl$PR_SET_SECCOMP(0x34, 0x1, 0x0) [ 234.073162][ T8806] general protection fault, probably for non-canonical address 0xdffffc0000000104: 0000 [#1] PREEMPT SMP KASAN [ 234.084943][ T8806] KASAN: null-ptr-deref in range [0x0000000000000820-0x0000000000000827] [ 234.093394][ T8806] CPU: 1 PID: 8806 Comm: syz-executor.0 Not tainted 5.8.0-rc4-next-20200713-syzkaller #0 [ 234.103294][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.113388][ T8806] RIP: 0010:__xfrm6_tunnel_spi_lookup+0x22b/0x3b0 [ 234.120192][ T8806] Code: 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 5b 01 00 00 4d 8b 24 24 4d 85 e4 74 53 e8 31 fa 7b fa 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 2d 01 00 00 4d 8b 7c 24 20 49 8d 7c 24 28 48 89 [ 234.139931][ T8806] RSP: 0018:ffffc900182d7580 EFLAGS: 00010202 [ 234.146184][ T8806] RAX: 0000000000000104 RBX: ffffffffffffffff RCX: ffffc90001c01000 [ 234.154180][ T8806] RDX: 0000000000040000 RSI: ffffffff86f8373f RDI: 0000000000000820 [ 234.162940][ T8806] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffff888093a2c9d0 11:18:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x7, 0x0, 0xa0) [ 234.171150][ T8806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000800 [ 234.179142][ T8806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.187137][ T8806] FS: 00007f50900fe700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 234.196089][ T8806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.202682][ T8806] CR2: 00007faecfde6db8 CR3: 000000009830b000 CR4: 00000000001506e0 [ 234.210677][ T8806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 11:18:24 executing program 3: prctl$PR_SET_SECCOMP(0x34, 0x1, 0x0) [ 234.218665][ T8806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.226646][ T8806] Call Trace: [ 234.229960][ T8806] xfrm6_tunnel_spi_lookup+0x8a/0x1d0 [ 234.235380][ T8806] ipcomp6_init_state+0x1de/0x700 [ 234.240504][ T8806] __xfrm_init_state+0x9a6/0x14b0 [ 234.245970][ T8806] xfrm_init_state+0x1a/0x70 [ 234.250577][ T8806] pfkey_add+0x1a10/0x2b70 [ 234.255991][ T8806] ? pfkey_get+0x700/0x700 [ 234.260471][ T8806] ? kfree_skbmem+0xef/0x1b0 [ 234.265292][ T8806] ? kfree_skb+0x7d/0x100 [ 234.269642][ T8806] ? pfkey_broadcast+0x3e1/0x630 [ 234.274598][ T8806] ? pfkey_get+0x700/0x700 [ 234.279139][ T8806] pfkey_process+0x66d/0x7a0 [ 234.283761][ T8806] ? pfkey_broadcast+0x630/0x630 [ 234.288740][ T8806] ? __mutex_lock+0xccb/0x10d0 [ 234.293697][ T8806] ? kvm_sched_clock_read+0x14/0x40 [ 234.298941][ T8806] pfkey_sendmsg+0x42d/0x800 [ 234.303566][ T8806] ? pfkey_send_new_mapping+0x11b0/0x11b0 [ 234.309519][ T8806] sock_sendmsg+0xcf/0x120 [ 234.313990][ T8806] ____sys_sendmsg+0x331/0x810 11:18:24 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x41, &(0x7f0000000440)=[&(0x7f0000000000)={0x4, 0x960000, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="1000000006ffffffffff600000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x10}]) [ 234.318979][ T8806] ? kernel_sendmsg+0x50/0x50 [ 234.324906][ T8806] ? do_recvmmsg+0x6d0/0x6d0 [ 234.329536][ T8806] ? kvm_sched_clock_read+0x14/0x40 [ 234.334761][ T8806] ? sched_clock+0x2a/0x40 [ 234.339204][ T8806] ? sched_clock_cpu+0x18/0x1b0 [ 234.344080][ T8806] ___sys_sendmsg+0xf3/0x170 [ 234.348684][ T8806] ? sendmsg_copy_msghdr+0x160/0x160 [ 234.354022][ T8806] ? __fget_files+0x272/0x400 [ 234.358989][ T8806] ? kvm_sched_clock_read+0x14/0x40 [ 234.364564][ T8806] ? sched_clock+0x2a/0x40 [ 234.369105][ T8806] ? sched_clock_cpu+0x18/0x1b0 11:18:24 executing program 3: prctl$PR_SET_SECCOMP(0x34, 0x1, 0x0) [ 234.373978][ T8806] ? sched_clock_cpu+0x18/0x1b0 [ 234.378877][ T8806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 234.385205][ T8806] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 234.391278][ T8806] ? trace_hardirqs_on+0x5f/0x220 [ 234.396457][ T8806] ? lockdep_hardirqs_on+0x6a/0xe0 [ 234.401590][ T8806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 234.408115][ T8806] __sys_sendmmsg+0x195/0x480 [ 234.412834][ T8806] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 234.418054][ T8806] ? lockdep_hardirqs_off+0x66/0xa0 [ 234.423365][ T8806] ? kvm_sched_clock_read+0x14/0x40 [ 234.428630][ T8806] ? sched_clock+0x2a/0x40 [ 234.433066][ T8806] ? sched_clock_cpu+0x18/0x1b0 [ 234.437925][ T8806] ? sched_clock_cpu+0x18/0x1b0 [ 234.442783][ T8806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 234.449100][ T8806] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 234.455107][ T8806] ? trace_hardirqs_on+0x5f/0x220 [ 234.460153][ T8806] ? lockdep_hardirqs_on+0x6a/0xe0 [ 234.465287][ T8806] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 234.471474][ T8806] __x64_sys_sendmmsg+0x99/0x100 [ 234.476446][ T8806] ? do_syscall_64+0x2d/0xe0 [ 234.481064][ T8806] do_syscall_64+0x60/0xe0 [ 234.485507][ T8806] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 234.491419][ T8806] RIP: 0033:0x45cba9 [ 234.495314][ T8806] Code: Bad RIP value. [ 234.499401][ T8806] RSP: 002b:00007f50900fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.507978][ T8806] RAX: ffffffffffffffda RBX: 00000000004fe340 RCX: 000000000045cba9 [ 234.516833][ T8806] RDX: 0000000000000393 RSI: 0000000020000180 RDI: 0000000000000005 [ 234.524824][ T8806] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 234.532816][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 234.540815][ T8806] R13: 0000000000000919 R14: 00000000004cbed9 R15: 00007f50900fe6d4 [ 234.548805][ T8806] Modules linked in: [ 234.552957][ T8806] ---[ end trace a8274db339470b7b ]--- [ 234.558692][ T8806] RIP: 0010:__xfrm6_tunnel_spi_lookup+0x22b/0x3b0 [ 234.565274][ T8806] Code: 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 5b 01 00 00 4d 8b 24 24 4d 85 e4 74 53 e8 31 fa 7b fa 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 2d 01 00 00 4d 8b 7c 24 20 49 8d 7c 24 28 48 89 [ 234.585006][ T8806] RSP: 0018:ffffc900182d7580 EFLAGS: 00010202 [ 234.591189][ T8806] RAX: 0000000000000104 RBX: ffffffffffffffff RCX: ffffc90001c01000 [ 234.599275][ T8806] RDX: 0000000000040000 RSI: ffffffff86f8373f RDI: 0000000000000820 [ 234.607398][ T8806] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffff888093a2c9d0 [ 234.615898][ T8806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000800 11:18:24 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x500017e) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 234.624433][ T8806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.632517][ T8806] FS: 00007f50900fe700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 234.642024][ T8806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.648756][ T8806] CR2: 00007faecfde6db8 CR3: 000000009830b000 CR4: 00000000001506e0 [ 234.656905][ T8806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.665011][ T8806] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.673098][ T8806] Kernel panic - not syncing: Fatal exception in interrupt [ 234.681258][ T8806] Kernel Offset: disabled [ 234.685679][ T8806] Rebooting in 86400 seconds..