[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts. 2020/06/19 00:07:07 fuzzer started 2020/06/19 00:07:07 dialing manager at 10.128.0.105:45279 2020/06/19 00:07:07 syscalls: 3090 2020/06/19 00:07:07 code coverage: enabled 2020/06/19 00:07:07 comparison tracing: enabled 2020/06/19 00:07:07 extra coverage: enabled 2020/06/19 00:07:07 setuid sandbox: enabled 2020/06/19 00:07:07 namespace sandbox: enabled 2020/06/19 00:07:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/19 00:07:07 fault injection: enabled 2020/06/19 00:07:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/19 00:07:07 net packet injection: enabled 2020/06/19 00:07:07 net device setup: enabled 2020/06/19 00:07:07 concurrency sanitizer: enabled 2020/06/19 00:07:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/19 00:07:07 USB emulation: enabled 2020/06/19 00:07:11 suppressing KCSAN reports in functions: 'pcpu_alloc' 'lru_add_drain_all' 'ext4_mark_iloc_dirty' '__delete_from_page_cache' 'blk_mq_dispatch_rq_list' 'vfs_readlink' 'blk_mq_rq_ctx_init' 'tick_sched_timer' 'kauditd_thread' 'shmem_getpage_gfp' 'ext4_writepages' 'do_select' 'ext4_mb_good_group' 'dec_zone_page_state' 'tick_nohz_next_event' 'ext4_free_inode' 'ext4_mb_find_by_goal' '__delayacct_blkio_end' 'dd_has_work' '__add_to_page_cache_locked' '__mod_timer' 'ext4_free_inodes_count' '__ext4_new_inode' '__send_signal' 'futex_wait_queue_me' '__xa_set_mark' 'shmem_file_read_iter' 'direct_page_fault' '__find_get_block' 'alloc_pid' 'pipe_double_lock' '__mark_inode_dirty' 'pipe_lock' 'xas_clear_mark' '__blkdev_put' 'do_syslog' 'page_counter_charge' 'filemap_fault' 'ext4_da_write_end' 'expire_timers' 'do_signal_stop' 'n_tty_receive_buf_common' 'snd_seq_check_queue' 'do_epoll_wait' 'generic_write_end' 'snd_rawmidi_proceed' 'generic_file_buffered_read' 'shmem_mknod' 'copy_process' 'fsnotify' 'kcm_rfree' 'find_get_pages_range_tag' 'shmem_unlink' 'do_nanosleep' '__xa_clear_mark' 'blk_mq_sched_dispatch_requests' 00:08:36 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) close(r2) syzkaller login: [ 122.543617][ T8689] IPVS: ftp: loaded support on port[0] = 21 [ 122.600611][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 122.633052][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.640192][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state 00:08:36 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4540}], 0x1, 0x9) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000140)=0x80, 0x80800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x895, 0x3, 0x6, 0x1, 0x3, 0x1, 0x7, 0x5, 0x0, 0x400, 0x1, 0x0, 0xe7d, 0xcd, 0x2]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x9, 0x401, 0x1872, 0x6, 0xa2}, &(0x7f00000003c0)=0x98) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x2, 0x59, 0x0, 0x7}, {0x8, 0x1, 0x2, 0x380000}, {0x4, 0xd0, 0x2, 0x980}, {0x7f, 0x81, 0x8}]}, 0x10) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0xee01, r5) socketpair(0x25, 0x6, 0x1ff, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000580)={0x0, 0x40, 0x1000, 0x1, 0x9, 0x6bc, 0x4, 0x9, 0x0, 0x400, 0x95, 0x1e211991}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x10803, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = open(&(0x7f0000000600)='./file0\x00', 0x80000, 0x120) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000640)=r8, 0x4) syz_mount_image$ntfs(&(0x7f0000000680)='ntfs\x00', &(0x7f00000006c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000700), 0x4000, &(0x7f00000007c0)={[{@show_sys_files_no='show_sys_files=no'}], [{@fowner_gt={'fowner>'}}]}) [ 122.648293][ T8689] device bridge_slave_0 entered promiscuous mode [ 122.656117][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.663874][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.671336][ T8689] device bridge_slave_1 entered promiscuous mode [ 122.687530][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.697955][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.717255][ T8689] team0: Port device team_slave_0 added [ 122.733300][ T8689] team0: Port device team_slave_1 added [ 122.761996][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.782517][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.832425][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.853908][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 00:08:36 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1830c0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000080)={{0x2, 0x0, 0x80, {0x3000, 0x1000}}, "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", "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"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000002140)='/dev/zero\x00', 0x2000c0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002180)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/capi/capi20\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002200)={0x0, 0x2}, &(0x7f0000002240)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002280)={r3, @in6={{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x84) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002340)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000002380), &(0x7f00000023c0)=0x4) pipe(&(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r5, 0x540d) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000002440)) getsockopt$inet_dccp_int(r5, 0x21, 0x10, &(0x7f0000002480), &(0x7f00000024c0)=0x4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002500)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000002540)) syz_mount_image$ext4(&(0x7f0000002580)='ext3\x00', &(0x7f00000025c0)='./file0\x00', 0x6, 0x5, &(0x7f0000002980)=[{&(0x7f0000002600)="dfb2bdefe019b1dee0f60c6345f170390f7ee980ffabb1181724197f6bf5598df911ed7dfaa96ea7960d46272d79917bb91c026a5af73452deb6976c0a00d511575dfa9a48061c7ea4a95216700bd313337d3e9726636b09db706f090724c2b9acae65599fb08c218b30407c8fa54aa7336658946be0e2aad6f2365f3d2971aaed66818c5addd564539a49f35a1beddd817240a405599013677a7656971122ac960ebbf0670659877a10bc146567469bd80fbfb73e9b1477", 0xb8, 0x9b}, {&(0x7f00000026c0)="4946e75bc431597c2a52d3bd39f6603bec8bd6fa1110ed70fc0921c1a0835690ed872c7ff62c94cc896140c00ec8147b5468c2a136c223623fce722eaaa1aef7210547031670f899a2decd030cfc481a9bf43535338029eb952499cb250c057564425116006eceb70da722889ab4be1e37ef5f1b01a2753377e695929c41fcfd5b72985f179c139311ee9a0add00a5957f8089002d1f4f5cae71e06f751c327c07352a169ea94843bb32db821ee32bece02d9d7986948b998aacf5ff620750f0f7f8b7bd12aae1d8673c35f114a437e108ce986070b30be768546acb881427fe8bc89628b8f2eb9beaa8cb90dfae129897e35c05f24f6006dabf10a9800c", 0xfe, 0x100000000}, {&(0x7f00000027c0)="181d74ab8e22ba24087283e798632290256e05331ff20217d4c6d9442e08bee07872c7858684d99dd82d8cafc1b9d4c51961513b386560cd9342e27e7ef82dbb01ebd1af05cef6398ddf934c2350f8f577b52180ddf78497bf25fd92eafb13768c94398316b3b6eefed6ef2f6f5f24b5768fc78c12756ddf8888044dc2e67f229346748f1f9bbeefbf2ce7e48adc", 0x8e, 0x8100000}, {&(0x7f0000002880)="526e61a3b20cff466912b7d2dfaf2cb0658835d5c8b6c06c5c3a9dd0dbabdd3cda5d2846e72d2b99dfb1d96e90ddc16df36152aff16589986fd44635c625fb95dba2179f7cef57b5397fc5759e9c47a43d23eef994c2cd", 0x57, 0xfffffffffffffff7}, {&(0x7f0000002900)="c1fef0820d9113db9046564eb6f3283f97746554b154ed4d804e7cb2d4ffcda88b89fedec56dc7752b6e62604f0cd08489156ade9dbf1c255aeec95f96a9306fab941ef4b51a414ed5d576b6a37f0039dd52fa211a9270130b69d4", 0x5b, 0x7}], 0x40804, &(0x7f0000002a00)={[{@bsddf='bsddf'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@data_ordered='data=ordered'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vhost-vsock\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/nvme-fabrics\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) [ 122.860859][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.887350][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.903089][ T8844] IPVS: ftp: loaded support on port[0] = 21 [ 122.984012][ T8689] device hsr_slave_0 entered promiscuous mode 00:08:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x26}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x43e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x399}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060051}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x1d, r2}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x3, 0x404, 0x61fd57cf, {0x77359400}, {r3, r4/1000+60000}, {0x4, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, "2de282b6c065bc99adc7d5fe31750a834630140a8af6c2121e9827d08bad1975e951a36a2660a30669fa745271d32373096f374ec0e2071ff28d8c3b2825bf5d"}}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) readlinkat(r5, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/150, 0x96) exit(0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x0, 0x0) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) splice(r6, &(0x7f0000000740)=0x8, r7, &(0x7f0000000780)=0xc8, 0x3, 0xe) prctl$PR_SET_FP_MODE(0x2d, 0x3) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000007c0)={0x0, 0x0}) sched_getattr(r8, &(0x7f0000000800)={0x38}, 0x38, 0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000980)=0x4, 0x4) [ 123.052703][ T8689] device hsr_slave_1 entered promiscuous mode [ 123.123912][ T8878] IPVS: ftp: loaded support on port[0] = 21 [ 123.149542][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 123.276023][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.293198][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.300731][ T8844] device bridge_slave_0 entered promiscuous mode [ 123.312012][ T8689] netdevsim netdevsim0 netdevsim0: renamed from eth0 00:08:36 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x80) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x80000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xb0}}, 0x80) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/btrfs-control\x00', 0x8000, 0x0) write$sndseq(r5, &(0x7f0000000680)=[{0x1, 0x6, 0x40, 0xf8, @tick=0x200, {0x9, 0x8e}, {0x2, 0x1}, @quote={{0x2, 0xf9}, 0x9, &(0x7f0000000600)={0xff, 0x81, 0x9, 0xcd, @time={0xbbeb, 0xee94}, {0x1, 0x7}, {0x6, 0x7f}, @result={0x0, 0x6}}}}, {0xf9, 0x8, 0x3f, 0x9d, @time={0xfffffffb, 0x10001}, {0x9, 0x2}, {0x44}, @result={0xff, 0x5a89}}, {0x7f, 0x1, 0xc8, 0x1, @tick=0x9, {0xff, 0x19}, {0x9, 0xa}, @ext={0xf, &(0x7f0000000640)="cf5f33c3559521821d500e5784ebab"}}, {0x9, 0x7f, 0x2, 0x7, @time={0x10000, 0x952}, {0x40, 0x4}, {0x8, 0x1}, @queue={0x2, {0x379b6f75, 0xc7}}}], 0x70) r6 = syz_open_dev$vcsu(&(0x7f0000000700)='/dev/vcsu#\x00', 0x9, 0x20080) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000740)=0x8001, 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x1}, &(0x7f0000000900)=0x8) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) r8 = socket$inet6(0xa, 0x80000, 0x400) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c) [ 123.364780][ T8689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.464978][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.472086][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.480721][ T8844] device bridge_slave_1 entered promiscuous mode [ 123.491094][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 123.500502][ T8689] netdevsim netdevsim0 netdevsim2: renamed from eth2 00:08:37 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x141200, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x2, 0x62c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x44, 0x8109, 'geneve1\x00', 'batadv0\x00', 'batadv_slave_0\x00', 'batadv_slave_0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0x1fe, 0xff], 0xae, 0x22e, 0x2a6, [@time={{'time\x00', 0x0, 0x18}, {{0x6, 0xb486, 0x145c9, 0x10cab, 0xffff84ce, 0x4}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:udev_helper_exec_t:s0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x1f, "6608de405b237f5210e7995b3b29ce2e4538bac4c497dd45609b8feb2141", 0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x7, 0x0, 0x0, "cb4f3ca702519769741f8bf198d819492f7608e505d9dac9c29b489557c7a40dc1ef5fbbdf3421182b08c4b63355fc5bc45f2dbd3fa5f174186ba8d32af33dd1"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x6d, 0x18, 'bond_slave_1\x00', 'vxcan1\x00', '\x00', 'veth1_to_bond\x00', @random="1326ead51ad3", [0x0, 0xff], @random="43ecb141a604", [0x0, 0xff, 0x1fe], 0x1d6, 0x27e, 0x2f6, [@comment={{'comment\x00', 0x0, 0x100}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5, 0x40, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x7, 0x400, 0x1, 0x0, "c3819c75104c126005fac3d1099208124c190ca79113f4ede8760fee6999e01d0171d661304ee4342bd49dc5219206ba66134f0f88facbfa9bdc44df8f50942f"}}}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x7, 0x0, 0x0, "2f56cf3658daa04b6d3718517849c285e5a70dd7c0d7d525758840802b7593c472ffe54e072a68e36b82c4733667c7e8a5b7cd0092bca991c90776f3e7627d59"}}}}]}]}, 0x6a4) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000740)='/dev/video1\x00', 0x2, 0x0) ioctl(r1, 0x2, &(0x7f0000000780)="29b5c9a1fecd6af0bb8d160900ddedc3b70b885e26ea24609f67a3af9f269b49709d683d770a64e00271a1af73cd5edebfa3ddf6262f7c8f73e433a3c0afe1dbf25a22e18722ddd482302ea3b79295d848b1d25dbd485dcb52") ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000800)=0x7fffffff) fcntl$setsig(r1, 0xa, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) mount$9p_virtio(&(0x7f0000000880)='syz\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x4039, &(0x7f0000000940)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x968}}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x400}}, {@mmap='mmap'}], [{@smackfsfloor={'smackfsfloor'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_user={'obj_user', 0x3d, 'mark_m\x00'}}]}}) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x8d, &(0x7f0000000a00)=""/141) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000ac0)={0x2, 0x0, [0x0, 0x0]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0xedd4e1f20c63b8db) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000dc0)=0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100)='/dev/hwrng\x00', 0x505200, 0x0) getpeername$inet(r5, &(0x7f0000001140)={0x2, 0x0, @multicast2}, &(0x7f0000001180)=0x10) lsetxattr$trusted_overlay_nlink(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='trusted.overlay.nlink\x00', &(0x7f0000001240)={'U+', 0x80}, 0x16, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000012c0)=""/4096) [ 123.594055][ T8689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.633713][ T9091] IPVS: ftp: loaded support on port[0] = 21 [ 123.640873][ T9126] IPVS: ftp: loaded support on port[0] = 21 [ 123.653594][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.706134][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.735969][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.743093][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.750433][ T8878] device bridge_slave_0 entered promiscuous mode [ 123.759492][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.766930][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.774479][ T8878] device bridge_slave_1 entered promiscuous mode [ 123.786273][ T9181] IPVS: ftp: loaded support on port[0] = 21 [ 123.815610][ T8844] team0: Port device team_slave_0 added [ 123.836597][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.852018][ T8844] team0: Port device team_slave_1 added [ 123.888132][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 123.898385][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.910952][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 123.931003][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.938407][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.964773][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.976834][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.983975][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.009889][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.047896][ T8878] team0: Port device team_slave_0 added [ 124.055756][ T8878] team0: Port device team_slave_1 added [ 124.104996][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.112030][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.120330][ T9091] device bridge_slave_0 entered promiscuous mode [ 124.130697][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.138631][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.146468][ T9091] device bridge_slave_1 entered promiscuous mode [ 124.193908][ T8844] device hsr_slave_0 entered promiscuous mode [ 124.232542][ T8844] device hsr_slave_1 entered promiscuous mode [ 124.303402][ T8844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.310942][ T8844] Cannot create hsr debugfs directory [ 124.318291][ T9181] chnl_net:caif_netlink_parms(): no params data found [ 124.326559][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.333873][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.341157][ T9126] device bridge_slave_0 entered promiscuous mode [ 124.349065][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.356651][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.383633][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.409225][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.417832][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.426088][ T9126] device bridge_slave_1 entered promiscuous mode [ 124.441623][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.453130][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.463426][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.474021][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.480941][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.506919][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.528314][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.603762][ T8878] device hsr_slave_0 entered promiscuous mode [ 124.632549][ T8878] device hsr_slave_1 entered promiscuous mode [ 124.682594][ T8878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.690197][ T8878] Cannot create hsr debugfs directory [ 124.699190][ T9126] team0: Port device team_slave_0 added [ 124.710998][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.718107][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.725583][ T9181] device bridge_slave_0 entered promiscuous mode [ 124.738726][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.748058][ T9126] team0: Port device team_slave_1 added [ 124.754770][ T9091] team0: Port device team_slave_0 added [ 124.769830][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.777705][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.804241][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.815205][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.822267][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.829707][ T9181] device bridge_slave_1 entered promiscuous mode [ 124.857400][ T9091] team0: Port device team_slave_1 added [ 124.865285][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.873322][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.900120][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.912679][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.923416][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.930853][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.939310][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.956161][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.964452][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.990776][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.001727][ T8844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.053948][ T8844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.096917][ T8844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.154222][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.165596][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.173101][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.199426][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.253641][ T9126] device hsr_slave_0 entered promiscuous mode [ 125.322525][ T9126] device hsr_slave_1 entered promiscuous mode [ 125.362425][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.370028][ T9126] Cannot create hsr debugfs directory [ 125.376009][ T8844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.434057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.444051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.452578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.459613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.467304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.475719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.484012][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.491032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.498733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.507619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.519848][ T9181] team0: Port device team_slave_0 added [ 125.563779][ T9091] device hsr_slave_0 entered promiscuous mode [ 125.622532][ T9091] device hsr_slave_1 entered promiscuous mode [ 125.672330][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.679933][ T9091] Cannot create hsr debugfs directory [ 125.695358][ T9181] team0: Port device team_slave_1 added [ 125.709047][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.716782][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.743236][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.755781][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.763081][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.790884][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.817578][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.826269][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.835765][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.844381][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.854368][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.891387][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.899270][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.907886][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.921878][ T8878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.064120][ T9181] device hsr_slave_0 entered promiscuous mode [ 126.102437][ T9181] device hsr_slave_1 entered promiscuous mode [ 126.172302][ T9181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.179854][ T9181] Cannot create hsr debugfs directory [ 126.186183][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.194373][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.204944][ T8878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.264423][ T8878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.324208][ T8878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.385276][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.402983][ T9091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.434221][ T9091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.485438][ T9091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.532424][ T9091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.589384][ T9126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.643800][ T9126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.684471][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.692823][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.700181][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.713040][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.730243][ T9181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.784638][ T9126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.814321][ T9126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.873182][ T9181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.934198][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.941631][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.961452][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.970842][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.978689][ T9181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.030665][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.048395][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.056501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.064508][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.073646][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.081746][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.088780][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.096754][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.105183][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.113460][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.120507][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.128117][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.136541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.144720][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.151725][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.159446][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.167790][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.176061][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.183208][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.190841][ T9181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.235313][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.262546][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.270343][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.279896][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.291987][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.301003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.309769][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.318489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.327432][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.335983][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.351550][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.371585][ T8878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.383809][ T8878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.395945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.405235][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.412945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.420303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.429645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.438243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.448524][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.456968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.467490][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.475929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.485921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.494225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.503602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.511939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.520544][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.529782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.538404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.547931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.557171][ T8689] device veth0_vlan entered promiscuous mode [ 127.573352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.580994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.588631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.596790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.604274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.612708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.620885][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.627930][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.635695][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.644035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.664042][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.682541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.690408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.700356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.708853][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.715876][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.723863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.732803][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.741224][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.749766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.758348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.765755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.780175][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.788411][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.796907][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.806872][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.816575][ T8689] device veth1_vlan entered promiscuous mode [ 127.828801][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.837461][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.845753][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.858441][ T9091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.870343][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.881212][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.892206][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.900117][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.909029][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.927881][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.941382][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.954864][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.962806][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.970162][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.979906][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.996796][ T9181] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.014507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.022717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.030327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.038983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.047724][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.054758][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.062399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.070715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.079049][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.086079][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.093791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.101189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.108758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.117403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.126933][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.138495][ T8689] device veth0_macvtap entered promiscuous mode [ 128.146149][ T9126] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.158391][ T8878] device veth0_vlan entered promiscuous mode [ 128.166138][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.174636][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.184216][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.192848][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.201123][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.210633][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.218975][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.227682][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.235348][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.245040][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.252629][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.263737][ T8689] device veth1_macvtap entered promiscuous mode [ 128.272130][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.280117][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.289506][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.299706][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.307961][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.321306][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.338485][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.346346][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.354907][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.366553][ T8878] device veth1_vlan entered promiscuous mode [ 128.379444][ T9181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.390594][ T9181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.406839][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.415822][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.423764][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.431314][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.440033][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.448449][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.455480][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.463456][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.471757][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.480169][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.487276][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.495330][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.503634][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.511837][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.520166][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.534868][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.543153][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.550917][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.558441][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.567228][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.576133][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.584583][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.594577][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.604261][ T8844] device veth0_vlan entered promiscuous mode [ 128.621534][ T9126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.632695][ T9126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.654058][ T8878] device veth0_macvtap entered promiscuous mode [ 128.661055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.669819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.678311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.687219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.695493][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.703666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.711698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.719177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.726735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.735488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.743690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.751122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.761888][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.772588][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.784668][ T8878] device veth1_macvtap entered promiscuous mode [ 128.792369][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.800163][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.809772][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.820393][ T8844] device veth1_vlan entered promiscuous mode [ 128.831148][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.853977][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.861842][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.870489][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.879692][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.888299][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.962401][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.970254][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.978552][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.986235][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.994563][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.004471][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.015169][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.026127][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.074538][ T9091] device veth0_vlan entered promiscuous mode [ 129.083765][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.091000][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.099154][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.108807][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.117427][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.132460][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.140676][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.164860][ T8878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.176851][ T8878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.188066][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.246641][ T8844] device veth0_macvtap entered promiscuous mode [ 129.260704][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.271479][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.281360][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.297063][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.306506][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.318341][ T9091] device veth1_vlan entered promiscuous mode [ 129.326686][ T9958] QAT: Invalid ioctl [ 129.331035][ T9181] device veth0_vlan entered promiscuous mode [ 129.344249][ T8844] device veth1_macvtap entered promiscuous mode [ 129.354260][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.363142][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.371154][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.380267][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 00:08:43 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) close(r2) [ 129.392394][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.397826][ T9963] QAT: Invalid ioctl [ 129.407532][ T9181] device veth1_vlan entered promiscuous mode [ 129.421610][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.435164][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.445293][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.459365][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.470892][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.485482][ T9965] QAT: Invalid ioctl [ 129.634115][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.652305][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.665653][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 00:08:43 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) close(r2) [ 129.677612][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.701906][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.712773][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.723706][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.734558][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.758552][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.766993][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.776601][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.786650][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.798075][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.803178][ T9977] QAT: Invalid ioctl 00:08:43 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$kcm(0x10, 0x0, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, 0x0, 0x10) capset(&(0x7f00000001c0), &(0x7f0000000200)={0xe9, 0x9, 0x0, 0xff, 0x3f38, 0x5}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000140)=0x9, 0x4) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$eventfd(r4, &(0x7f0000000080), 0xfffffefc) [ 129.858572][ T9126] device veth0_vlan entered promiscuous mode [ 129.899649][ T9181] device veth0_macvtap entered promiscuous mode [ 129.933993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 00:08:43 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) close(r2) [ 129.947637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.956314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.969502][ C1] hrtimer: interrupt took 44121 ns [ 129.984802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.007847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.028424][ T9986] QAT: Invalid ioctl [ 130.033139][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:08:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 130.054766][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.064903][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.072715][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.082679][ T9091] device veth0_macvtap entered promiscuous mode [ 130.090081][ T9126] device veth1_vlan entered promiscuous mode 00:08:43 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) [ 130.115271][ T9181] device veth1_macvtap entered promiscuous mode [ 130.131237][ T9091] device veth1_macvtap entered promiscuous mode [ 130.170603][ T9994] QAT: Invalid ioctl [ 130.220345][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.236959][ T27] audit: type=1804 audit(1592525323.791:2): pid=9997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/2/cgroup.controllers" dev="sda1" ino=15747 res=1 [ 130.260389][T10000] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner>00000000000000000000. [ 130.271747][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.278955][T10000] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 130.292308][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.302951][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.314519][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.324980][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.336210][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 00:08:43 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) [ 130.361100][ T9126] device veth0_macvtap entered promiscuous mode [ 130.382958][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.393642][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.407016][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.432735][T10008] QAT: Invalid ioctl [ 130.435499][T10000] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner>00000000000000000000. [ 130.437507][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.457941][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.462479][T10000] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 130.470001][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.486348][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.497410][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.509463][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.519940][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.530804][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.543913][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.554904][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.565222][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.571758][ T9997] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 130.576847][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.590183][ T9997] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/2/cgroup.controllers PID: 9997 Comm: syz-executor.2 [ 130.597547][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.619812][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.629707][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.640128][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.651193][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_0 00:08:44 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000680)={0x3, 0x79, "78aab6172dce7cd985dab2be1eebb8469003ad9e354108302180326ec6de660b539abb484d89ffff84b7b1ef73180e6a2cd6415ccca3615f8cc519d43a0b91844e88da5071936a6853de0edea548388a4152f95e5bc96b92ddb661561641f21f7da9e96deed24c9b72ea508319c1c1b75512979afb718bf3e7"}) select(0x40, &(0x7f0000000700)={0x5, 0x1b2, 0x4, 0x9, 0x5, 0x2, 0x65b0372a, 0x5}, &(0x7f0000000740)={0xffffffffffffff81, 0xead8, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x2, 0x9}, &(0x7f0000000780)={0xfffffffffffffff9, 0x20, 0x0, 0x4, 0x8, 0x4, 0xffff, 0xfbba}, &(0x7f00000007c0)={0x77359400}) [ 130.674712][ T9126] device veth1_macvtap entered promiscuous mode [ 130.703777][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.712734][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 00:08:44 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) syz_init_net_socket$ax25(0x3, 0x5, 0xca) [ 130.720529][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.739777][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.768223][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.782182][T10016] QAT: Invalid ioctl [ 130.786334][T10017] QAT: Invalid ioctl [ 130.790516][ T9712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.815781][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.827959][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.838763][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.849778][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.860549][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.871237][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.881419][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.892403][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.903373][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.985025][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.994435][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.011848][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.024426][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.034789][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.048389][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.059213][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.071627][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.083821][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.094740][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.106785][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.117638][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.128832][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.173965][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.182750][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.197725][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.209150][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.226222][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.239496][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.249885][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.261035][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.273227][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.284001][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.294481][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.305167][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.316031][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.353835][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.362719][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:08:45 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) 00:08:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:45 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/91) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x2, 0x0, 0x40000, 0x1f4}}], 0x1, 0x100, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno'}}) sendmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000080)="da809e26c355774b98866fe8f807f1e025c7520d9d59f6b5f75ec613dda92c9916f1d2becf04e62415140d57c0067b8378af30157d", 0x35}, {&(0x7f0000000180)="f1bd9c6ba678100ad6996e9f48a1d807e3f565ca4d1558badce681c316b8bebc13f34bdfeabdace702d2321b93d5fb2ac0419e7382cf59aebe9a00d0d563b3e77ff36481a5cb37f54ab4b46483d125f4223e020b89e8f838676ef2d9cc6cba3edb3a89cae04a8995ef0b7686a45789ade3d8b0fb0d0a0a6ad51ec3b9f583087ad749110eb5cc05f0398ab96472b2c5d7beb772d36886ac06973eca2a82194fb4", 0xa0}, {&(0x7f00000002c0)="6dace4f07c8109232c4b3cb3fb990bc8dddb25d9c6969e5b35c1e472ccb372806c5c22e79ee096350dd16be39c85c718d476a0ce0700afcfca89c130bab560b96ee8f3e33f1c11f997751140527c8e15a2c081365d488fcca3f2dd2d627424a1e3654763", 0x64}, {&(0x7f0000000380)="02e2446c71b34a6510dfe5e63ca15288bd24b0a2a257365a275b5a8c88ebc6102ee0e115e1fa3bb4858459798f02ba529312884981b2ee99ae07efe411631e2b1998857f9ceb06841cac3cf1f99bd68adffeaa233c7be067a52a6b97b16595da84e46db0f232b8846fc2c6a29cceae9bf128e56ebefa233d592da3218028ad9f8268d5e54b54295cfce9837251d3ce7c792401067ea9", 0x96}, {&(0x7f0000000440)="e8c3ed51a18a", 0x6}, {&(0x7f0000000480)="595f73c1141098dad0196e089f4b78a74392a3568bb65c6f6257160c9dde42023333462ce40c6bbb29f32fa70c6be9894f7cd2346105f9627b5870e550f4de5061eb6c3f962f1a96d303b750932a8f883240d0a47065db4e257dc0861df8600d5eda047d9706", 0x66}, {&(0x7f0000000500)="13614f9baf29b848e41e2524e26c40dbd11c1722f0ae817927ee3bdda54220634b6daeb3181dcc39d7cad85801c7632e8512a6f48d1063176f6e97c6fbf16e0e6b688a124e41972c47208da8a3f0c2244cfbd034452927a0822a1f714632f340c4528e4c179d9a9c2c6c062603645a80738a9ea1e0b784fee0987e3bc2b1dcfcfccf3ec2ae7057cb89cdca488ddea1b5ba679c8783e1fdf526fba1e7d0e28fd0bc25b9107d5bc5d3149d4ffc9edb782559af5d1415d11dfecc3f862e3cb16a7a6cc1ec2b619837853cad1e75f61b21872fe36931c6cf5c3b155391ebd4", 0xdd}], 0x7, 0x0, 0x0, 0x8001}, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 00:08:45 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f00000004c0)='./bus\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6df523a4d3598c6a126c00002dff25302f"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/184, &(0x7f00000000c0)=0xb8) 00:08:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x3, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0x1000, 0x6}, {&(0x7f0000000100)="4814bfdb9278ccc8c1e957946d6e039127fb01180fee07686bd2cdec19529fae89ebdef8641b3dd758e51e731289bedfe234896f4f7a31bab9a3ead30a79f8c14b398853dc5f9c39ef075c56954994f53ba81cb207785e489cd246a5cfeee931928265", 0x63, 0x1}, {&(0x7f0000000180)="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", 0xfc, 0x8db1}], 0x21800, 0x0) 00:08:45 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) [ 132.126353][T10050] QAT: Invalid ioctl 00:08:45 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) socket$inet6_dccp(0xa, 0x6, 0x0) [ 132.171823][T10057] tmpfs: Unknown parameter 'mõ#¤ÓYŒjl' [ 132.185674][T10058] fuse: Unknown parameter 'max_ˆe{d' [ 132.214986][ T27] audit: type=1804 audit(1592525325.772:3): pid=10051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/3/cgroup.controllers" dev="sda1" ino=15768 res=1 [ 132.303200][T10073] QAT: Invalid ioctl 00:08:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}}) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000100), 0x4) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:08:45 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) [ 132.365082][T10071] fuse: Unknown parameter 'max_ˆe{d' [ 132.454654][T10076] IPVS: length: 184 != 24 [ 132.457789][T10082] QAT: Invalid ioctl [ 132.470094][T10057] tmpfs: Unknown parameter 'mõ#¤ÓYŒjl' 00:08:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) 00:08:46 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) [ 132.661293][T10097] fuse: Unknown parameter 'max_ˆe{d' [ 132.682520][T10094] QAT: Invalid ioctl [ 132.705496][T10076] IPVS: length: 184 != 24 00:08:46 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) 00:08:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) [ 132.742036][ T27] audit: type=1804 audit(1592525326.292:4): pid=10092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/4/cgroup.controllers" dev="sda1" ino=15767 res=1 [ 132.813164][T10105] QAT: Invalid ioctl [ 132.860897][T10106] fuse: Unknown parameter 'max_ˆe{d' 00:08:46 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) r6 = open(&(0x7f0000000500)='./file0\x00', 0x111801, 0x80) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000540)={0x4, 0x0, [{0x10000, 0x2, 0x0, 0x0, @irqchip={0x5, 0x1}}, {0x401, 0x1, 0x0, 0x0, @msi={0x5b59, 0x8, 0x51, 0x4800759c}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x2, 0x341e3ffa44d27ee, 0x0, 0x0, @sint={0x6, 0xfffffff8}}]}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) 00:08:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000004c0)={r5}) 00:08:46 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) [ 132.998730][T10116] fuse: Unknown parameter 'max_ˆe{d' [ 133.005894][T10115] QAT: Invalid ioctl [ 133.015728][T10114] QAT: Invalid ioctl 00:08:46 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) 00:08:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 133.134350][T10122] fuse: Unknown parameter 'max_ˆe{d' 00:08:46 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x9}) pwrite64(r0, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02e", 0x36, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8820, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000200)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r1, @in, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x951, 0x800000000007ff, 0x0, 0x5, 0x0, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000080)=0x35) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) fcntl$addseals(r3, 0x409, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 00:08:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000480)={0x6, 0x9, 0x10000, 0x3}) 00:08:46 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x141442, 0x0) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="b773ff445725782e22f2d0a7b8f01773177fc5b141e6d0bdfa232b80a4ed3cb6e3e1a9d81cc6f1ba3842a9e2a39b96132b13468b89bfacb093de792946666da488e464", 0x43}, {&(0x7f00000000c0)="c030024044d1e3bb68df56b671776a20153086039dfb6bf3b982d5a960ee4e58f269d9ca42d9617998a28c7fc9b0189f7bf77eaf7d", 0x35}, {&(0x7f0000000100)="ac88bdd30f7644f035f23fce80928618eac9a0c10e5fed6adc46f6d76874d44f64391a93ae563d2667828b2132a1dc088dfa4e268221bb939461c976c54656d36b61a11bc1285df9053eb78bbcc763c38869548bfa946f8cadca6e1dd191d77a71df9e93d902b2e5abebd062babe2169f1bc9c4f3acae8891d8178c0dd73b4593ed56de0e9cd1f85d25e996c683cc7200ba8a50e8a0be236677b615539fd8cc55bd39d0aae6dbeaccf590c76f660e1a9e69e323b518f2910a542", 0xba}, {&(0x7f00000001c0)="e878d3b62de72fcb971eb34f34e2d4ae1d99ac42bcca05a5eb015396ce8edd45c268e976c5bc6a17c1131a4acd796a22c3204d5ff95ea6c577103e0773e201b87db606bcb805d7ed776331bc47315679557ea9820fb643e6b66ad1019809af3d1759810a58d70c2998723bab73723ef7f61d783f275d678f7e8a83508f220d4c5212223a803b1279106dd3302ffdf5e3cb6c5937c6e115a560c93eb08a3d97233b0325746565515b38571dfc0496f8", 0xaf}], 0x4}, 0x4004805) write$cgroup_pid(r0, 0x0, 0x2e) 00:08:46 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) [ 133.232716][ T27] audit: type=1804 audit(1592525326.792:5): pid=10121 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/5/cgroup.controllers" dev="sda1" ino=15768 res=1 00:08:46 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) ioctl$TUNSETLINK(r7, 0x400454cd, 0x311) [ 133.308902][T10133] fuse: Unknown parameter 'max_ˆe{d' 00:08:46 executing program 5: clone(0x2000a1047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77666e1d00008ddd11fb0a1405ce7f9b8200", @ANYRESHEX, @ANYBLOB="1f53974d06566781600a0f50c00eeaee"]) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x1, 0x71, 0x4, 0x1}) 00:08:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) [ 133.424045][T10140] fuse: Unknown parameter 'max_ˆe{d' 00:08:47 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)=0x1ff, 0x4) 00:08:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="25bcc574769e620a2734fa0095e0612687ecb86a548802a902000000000000004e0f98b579a782d270146d0e0206e7ff9f5400d74000760253ef", 0x3a, 0x400}], 0x20000, 0x0) 00:08:47 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) 00:08:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:47 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000280)=""/231, 0x3}) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 133.719782][T10165] fuse: Unknown parameter 'max_ˆe{d' [ 133.776335][ T27] audit: type=1804 audit(1592525327.332:6): pid=10164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/6/cgroup.controllers" dev="sda1" ino=15783 res=1 00:08:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000000)) r3 = dup(r1) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno'}}) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000040)) 00:08:48 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) 00:08:48 executing program 5: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1522d596cd3cd8b2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x474, r3, 0x2, 0x70bd2a, 0xfffeffff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x458, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x294, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x5}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x81}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x81, @loopback, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c2384cc9b826ea585bcdffbf8516a2d2a4131b037f6f7e20c95d0bcbfe61abed"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ddcdbc01c5c75edaf9585b9aa54a3143138a3a12c3acfeb551259e58895d9136"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c93314dc8723d04bfee1de013258c4b1c5401b9334b026e6ff2433c0e7d34040"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x38, @empty, 0x2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e95502c2467ffaae45f4851cf4cff1249184a1ef950b44f92549ffe56e3cbaa1"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}]}, 0x474}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3dc08722e190ea50316c17689b26de6c93220f461a61b64326a37fc95887bdf0d18607a785e0ba3116", @ANYRESHEX, @ANYBLOB=',\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'sit0\x00'}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8371e9bf19dded69}, 0x40010) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0xfb, 0x67, 0x2, 0x5, 0x0, 0x5, 0x40100, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd00, 0x4, @perf_config_ext={0x4, 0x6}, 0x0, 0x1, 0x4, 0x8, 0x8, 0x4, 0x9}, r4, 0x7, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 00:08:48 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:48 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) 00:08:48 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 134.531181][T10190] fuse: Unknown parameter 'max_ˆe{d' [ 134.539651][T10188] fuse: Unknown parameter 'max_ˆe{d' 00:08:48 executing program 5: r0 = fsopen(&(0x7f0000001180)='jfs\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001100)={0x4, 0x68, 0x8, 0x1, 0x1}) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xf67ffff, 0x5, 0x53c, r4, 0x0, &(0x7f0000000000)={0x990a72, 0xf8e, [], @value=0x8}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f00000010c0)={0x6, 'geneve0\x00', {0x5}, 0x2}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000300)='default_permissions', &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c) [ 134.616031][ T27] audit: type=1804 audit(1592525328.172:7): pid=10201 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/7/cgroup.controllers" dev="sda1" ino=15801 res=1 00:08:48 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x521200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 00:08:48 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 134.759964][T10193] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 00:08:48 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:48 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 00:08:48 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') [ 134.824281][T10193] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/7/cgroup.controllers PID: 10193 Comm: syz-executor.2 [ 134.908806][T10232] fuse: Unknown parameter 'max_ˆe{d' 00:08:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c853f00", @ANYRES16, @ANYBLOB="110000ffffff0180030008000300", @ANYRES32], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:48 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:48 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) [ 134.929371][T10234] fuse: Unknown parameter 'max_ˆe{d' [ 135.012039][T10240] fuse: Unknown parameter 'max_ˆe{d' 00:08:48 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x6001, 0x0) 00:08:48 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) 00:08:48 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x6001, 0x0) 00:08:48 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) [ 135.207157][T10258] fuse: Unknown parameter 'max_ˆe{d' [ 135.234089][T10259] fuse: Unknown parameter 'max_ˆe{d' [ 135.242550][T10239] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 135.276320][T10239] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/8/cgroup.controllers PID: 10239 Comm: syz-executor.2 00:08:49 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) 00:08:49 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x6001, 0x0) 00:08:49 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) 00:08:49 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) 00:08:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:49 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2ce30a58c52c92156a600001eba700"]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000300)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno'}}) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000080)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x11b4, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x1188, 0x2, [@TCA_U32_ACT={0x1184, 0x7, [@m_police={0x1180, 0xd, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x10c4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x37, 0x8, 0x6, 0x9, 0x8001, 0x7, 0xfffffff9, 0x7f, 0x8, 0x0, 0xfffffffb, 0x1000, 0xbad, 0xfffffffc, 0x1, 0x10001, 0x0, 0x20, 0x9, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x0, 0x2, 0x7, 0x2, 0x4, 0x3f, 0x7, 0x3ff, 0xffff7fff, 0x1, 0x0, 0x8, 0x401, 0x8, 0x7, 0x0, 0x2, 0x20, 0x0, 0x1, 0xa56, 0x1, 0x36f1, 0x7, 0x8000, 0x8, 0x9, 0x9, 0xaa, 0x97, 0x3ff, 0xfffffc3e, 0x9, 0xffffffff, 0x7be6, 0x0, 0x4, 0x2, 0x1, 0x7a, 0x6000, 0x80, 0x8, 0x1, 0x0, 0x4, 0x0, 0x3f, 0x81, 0x4d89, 0x800, 0xa45f, 0xfffffff8, 0x8, 0xff, 0x6f1c, 0x3ff, 0x117f, 0x0, 0x80, 0x5, 0x9d, 0xff, 0x7, 0x0, 0x8, 0x5, 0x7, 0xbdd000, 0x6, 0x3, 0x3, 0x1, 0x3, 0x137f, 0x3, 0x9, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x87, 0x8, 0x8000, 0x81, 0xff, 0x7fffffff, 0x8, 0x5, 0x7fffffff, 0x8, 0x6, 0x9, 0x1, 0xbd, 0x8, 0x3, 0x5, 0x9, 0xfffffffc, 0x3, 0x40, 0x2, 0x6, 0x3e9, 0x0, 0x56, 0xd4f, 0x3, 0x3, 0x0, 0x1, 0x8001, 0xfffffffb, 0x1, 0x7f, 0x400, 0x401, 0x4, 0xeb, 0x6, 0x101, 0x10001, 0x80, 0x3, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x7ff, 0x50c, 0x3505, 0xfff, 0x1f, 0x401, 0x10001, 0x200, 0x80000000, 0x3, 0x7a8e, 0x80000000, 0xad9, 0x0, 0x7, 0x8, 0x3, 0x100, 0x2fc1, 0x1000, 0x5b, 0xffffd553, 0x7f, 0x7, 0x3, 0x5, 0x54ef3985, 0xfffffffc, 0x3, 0x9, 0x1, 0x1, 0x3, 0x3, 0x1f, 0x100, 0x401, 0x8, 0x0, 0x7, 0xbf9, 0x4, 0x9, 0x5, 0x400, 0x6, 0xe5bd, 0x4, 0x80000001, 0xffff7fff, 0x2d, 0xfffffffa, 0xfffffffe, 0xd347, 0x1200, 0x7, 0xffffffff, 0xff, 0x7ff, 0x1, 0x6, 0x3f, 0x7, 0x7, 0x3, 0x6, 0x0, 0x9, 0x540, 0x401, 0xffff, 0x20, 0x82, 0x7ff, 0x5, 0x4, 0x1, 0x81, 0x6, 0x20400000, 0x6, 0x8, 0x4, 0x21, 0xffff, 0xfffff6e2, 0x101, 0x8000, 0x4, 0xbf0, 0x0, 0x5, 0x2, 0x0, 0x8000, 0x5, 0x401, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffeffff, 0x2e9, 0x800, 0x5, 0x81, 0xfff, 0x9, 0xfff, 0x9, 0x8, 0x7ff, 0x6, 0x9, 0x8, 0x3ff, 0x9bf6, 0x3f, 0x4b2a, 0x81, 0x9, 0x8000, 0xf622, 0x0, 0x8000, 0x9, 0x0, 0x1, 0x6, 0x9, 0x1, 0x80000000, 0x5, 0xffff0001, 0x3, 0xf6b, 0x3, 0xffffffff, 0xf0df, 0x2, 0x5, 0x52, 0x80000001, 0x1, 0x73f8, 0x20, 0x5f7c, 0x7, 0x2, 0x1, 0x2, 0x401, 0xffffffc1, 0x800, 0xfffffff9, 0xfffffff8, 0x7, 0x1, 0x8001, 0x1, 0x20, 0x6, 0x7fff, 0x73, 0x1, 0x80, 0x9, 0xffffff01, 0x0, 0x0, 0x8001, 0x8eb, 0x40000, 0x10000, 0x4, 0x80000001, 0x0, 0x7353, 0x200, 0x7fff, 0x9, 0x3ff, 0x7ff, 0x8, 0x20, 0x81, 0x0, 0x7, 0xfffff001, 0xc22, 0x3, 0x2, 0xffff7fff, 0xb66, 0xbfa, 0x781c, 0x7, 0x8, 0x9, 0x8, 0x1, 0x1b79e0, 0x8000, 0x9, 0xfffffffd, 0x7, 0xffff, 0x81, 0x5, 0x383d, 0x9, 0x0, 0x7fffffff, 0x3d, 0x7277, 0x3, 0x1ff, 0x6, 0x2, 0xf4, 0x7, 0x0, 0xcfe, 0x5, 0xff, 0x4, 0x0, 0x201, 0x1, 0x3e, 0xf10b, 0x0, 0x1, 0x2, 0x1, 0x40, 0x8, 0x0, 0x20, 0xef8, 0xdf2, 0x73, 0x10001, 0x4, 0xe3e, 0x5, 0x1000, 0x200, 0x9, 0x3f, 0x2, 0x81, 0x8, 0x100, 0x1, 0x3f, 0x3f, 0x4, 0x1, 0x80000000, 0x9, 0xffff8001, 0x8, 0x401, 0x7da, 0x9, 0x9, 0x5, 0x7ff, 0x400, 0x5, 0x1, 0x5, 0x3, 0x5, 0x7fff, 0x4, 0x6b6a88c1, 0x5, 0x5, 0x7, 0x9, 0x3, 0xfffffe00, 0x0, 0x1ff, 0x3f, 0x0, 0x6, 0x0, 0x6, 0xda, 0x3ff, 0x400, 0x5702, 0x25, 0x7fffffff, 0x0, 0x88, 0x1ff, 0x8, 0x0, 0x8, 0x5d7, 0x1, 0xffffffd6, 0xbd13, 0x2, 0x9809, 0x4, 0x3, 0x0, 0x80, 0x5e3, 0xffffff7f, 0x2, 0xfff, 0x6, 0x1ff, 0x6a008d51, 0x7, 0x8, 0x1, 0xe2, 0x5, 0x8, 0x10000, 0x8, 0x7fff, 0x7, 0x3f, 0x6, 0x3, 0x4, 0x800, 0x8001, 0x7fffffff, 0x4, 0x1, 0x93, 0x1, 0x100, 0x3ff, 0x100, 0x3ff, 0x2, 0x8001, 0xfff, 0x80000001, 0x0, 0x8, 0x7, 0x8001, 0x8001, 0x2000000, 0x3, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x69d7, 0x3, 0x8000, {0x1, 0x2, 0x4, 0x6, 0x800, 0xfe}, {0x48, 0x1, 0x4dc4, 0x0, 0x7, 0x8000}, 0x0, 0x800, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x2, 0x7, 0x2, 0x1, 0x5d, 0x8, 0x16a6, 0x3ff, 0xecc2, 0x6, 0xfffff7b3, 0x0, 0x1, 0x3, 0x7ff, 0x0, 0x8, 0xff, 0x8, 0x4, 0x5, 0x800, 0x8001, 0x80000001, 0x1, 0x0, 0x1, 0xa645, 0xfff, 0x1000, 0x7fff, 0x1c00, 0x10001, 0x101, 0x7, 0x0, 0x20, 0x7, 0x1ff, 0x3ff, 0x3a, 0x7ff, 0x80, 0x5, 0x5, 0x7fff, 0x5, 0x7, 0x401, 0x0, 0x9, 0x0, 0x84, 0x5, 0x17d28998, 0x1, 0x60, 0x3a, 0x80000000, 0x10000, 0x9, 0x16c5, 0x7fff, 0x9, 0x8000, 0x200, 0x8000, 0x7, 0x5, 0xffff, 0x1, 0x3ff, 0x9, 0x2, 0x2d18e976, 0x2000, 0x3, 0xf2, 0x3, 0x4, 0x1, 0x400, 0xc01, 0x1f, 0xde, 0x48, 0x1, 0x3f, 0x9, 0x7, 0x10000, 0x5, 0x7, 0x3, 0x401, 0x5, 0x7, 0x9, 0x7, 0x80000001, 0x0, 0x100, 0x3, 0x20, 0x6, 0xb6cc, 0x10001, 0xff, 0x7f, 0x40, 0x8, 0x400, 0x0, 0x80, 0x0, 0x8000, 0x8001, 0x2, 0x6, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x401, 0x80000001, 0x875a, 0x6, 0x6a6112a6, 0x0, 0x7, 0x2, 0x5, 0x1, 0x9, 0x5, 0x5, 0x9, 0xe3, 0x3, 0x6f, 0x5, 0xfff, 0x3d1, 0x0, 0xffffffff, 0x7, 0x4, 0xffffff01, 0xff, 0x80000000, 0x7fffffff, 0x1, 0xffffffe1, 0xb273, 0x7fff, 0x7fff, 0x6, 0x8000, 0x1, 0x7fff, 0x80, 0xfffffff9, 0x3, 0x1, 0x77d3, 0x5, 0x7, 0x40, 0x0, 0x7, 0x5, 0x91, 0x7ff, 0x6, 0x7, 0x5, 0x5, 0x7, 0x8, 0x7, 0x9, 0x0, 0x20, 0x4, 0x7, 0xf97, 0x1, 0x8, 0x8001, 0x5, 0x0, 0x6, 0x88000, 0x8000000, 0x8, 0x3, 0x8, 0x3, 0x7908, 0x8, 0x3, 0x499e88a4, 0x7fff, 0xfffffff9, 0x7, 0x8, 0x3, 0x6, 0x8, 0xa8, 0x401, 0x8, 0x8, 0x1, 0x3, 0x20, 0xbce, 0x4, 0xed, 0x1, 0x6, 0x7ff, 0x21, 0x3ff, 0x8, 0xcadb, 0x200, 0x3, 0x7, 0x4, 0x8, 0x2, 0x200, 0x1efe, 0xdfaa, 0x7fff, 0x3, 0x80000001, 0x7f, 0x5, 0x7fffffff, 0x10000, 0x9, 0x5115, 0x7, 0x2, 0x7, 0xfffffffb, 0x2, 0x515, 0x6, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf505}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x8, 0xf7, 0x7fff, 0x5, 0x9, 0x3, 0x8, 0x4fd, 0x8, 0x4, 0x5, 0x32e9, 0x5, 0xfffc0000, 0xf11, 0x2, 0x37, 0x81, 0x81, 0x5, 0x2, 0x2, 0x5d, 0x6, 0x0, 0x2, 0x69, 0x2, 0x303, 0x9ce4, 0x551, 0x400, 0x7fff, 0x8000, 0x5, 0x77518b48, 0x20, 0x6, 0x9, 0x80, 0x4, 0x0, 0x5, 0x7f, 0x7, 0x8001, 0x8000, 0x3, 0xea, 0x3, 0x9d20, 0x8, 0x1db74f86, 0x3, 0x8, 0xff, 0xfffffffb, 0x1, 0x1f, 0x1, 0xaeb, 0x2, 0x3, 0x2, 0x4e, 0x3e90dac, 0xe11, 0x7, 0x101, 0x4, 0x5, 0x1fa9, 0x4, 0x7, 0xffff, 0x834, 0x8, 0x4, 0x6, 0x5, 0x8, 0x1, 0x3, 0x401, 0x2, 0x7fffffff, 0x9, 0xfff, 0x10001, 0x9, 0x4, 0x0, 0x8, 0x6, 0x101, 0x7d6, 0x1, 0x800, 0x8001, 0x9, 0xfbf9, 0x7, 0x6, 0x562, 0x57, 0x7fffffff, 0xd6b5, 0x7, 0x0, 0x3fa8, 0x0, 0x4, 0x28da, 0xe3, 0x7f, 0x2, 0x9, 0x80000000, 0x800, 0x37, 0x55423fd0, 0x6f5f, 0x5, 0xcb0, 0x0, 0x1000, 0xff, 0x9, 0x4, 0x3, 0x1ff, 0x8, 0xff, 0x2, 0x10001, 0x7, 0xf0000000, 0xfff, 0x4, 0x0, 0x4, 0x80, 0x1ff, 0x80, 0xeb, 0x2, 0xfa5, 0x2, 0x9, 0x4, 0x3, 0x1, 0x1, 0x6, 0x7fff, 0x7f, 0x352e, 0x80000000, 0x1, 0x3bd, 0x7b, 0x3, 0x101, 0x0, 0x101, 0x3, 0x21c, 0x8000, 0x2391, 0x36902e8e, 0x1, 0x7, 0x100, 0x0, 0x2, 0x0, 0x1, 0x4, 0x4, 0xb6, 0x2, 0x5, 0x3f, 0x4, 0x1ff, 0x1, 0xff, 0x4, 0x1, 0x7, 0x99, 0x8001, 0x7, 0x5, 0x93c, 0x6, 0x100, 0x4, 0x5, 0x4, 0x1, 0x200, 0xffff, 0xfffffffb, 0x200, 0x7fff, 0x3, 0x3, 0x3, 0x9, 0x9, 0x3ff, 0x2, 0x3, 0x5, 0x8, 0x1, 0x7, 0x9, 0x660, 0x3f, 0x401, 0x9, 0x1, 0x1000, 0x1, 0x8, 0x20, 0x1000, 0xfffffffe, 0xffffffff, 0x6, 0x1, 0x6, 0x6, 0xa6, 0x0, 0x80, 0x3, 0x800, 0x1, 0x5f, 0x9, 0x54b2, 0x0, 0x4, 0xfffffffc, 0x81, 0x4, 0x4, 0x7, 0x1, 0x80000000, 0x75, 0x7c000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x2, 0x9, 0x3, {0x0, 0x0, 0x6, 0x1ff, 0xfffa, 0x101}, {0x20, 0x0, 0x81, 0x3f, 0x2, 0x4}, 0x600000, 0xaeb, 0x50a09f02}}]]}, {0x94, 0x6, "948e89b739b9d6792207c60edbd705b375f7836211b02327e2f2feed08bf21f5b93e98cfa906f148eeb2aab27855e682ff150c3980ecccf6d8561072d0545a5935b3f344d819f15169575f44ffa3397e6e0225f8eee5d636b679b6455a2d5bcc9d388292f45aedeba0c1e927e0abcfedaa56d28ee451068e496fa2f258fcfaf9fb41e1452c09aec01a395d84b4098b53"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}}]}, 0x11b4}}, 0x0) 00:08:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) [ 135.600241][T10279] fuse: Unknown parameter 'max_ˆe{d' [ 135.609075][T10281] fuse: Unknown parameter 'max_ˆe{d' [ 135.609393][T10280] fuse: Unknown parameter 'max_ˆe{d' [ 135.635787][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.689598][T10287] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.712886][ T27] kauditd_printk_skb: 1 callbacks suppressed 00:08:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) [ 135.712897][ T27] audit: type=1804 audit(1592525329.272:9): pid=10283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/9/cgroup.controllers" dev="sda1" ino=15821 res=1 [ 135.772861][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.793299][T10287] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 00:08:49 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCATTCHAN(r1, 0x10, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000100)) 00:08:49 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 00:08:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x0, 0x0) 00:08:49 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x800000080004105) 00:08:49 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) 00:08:49 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) [ 135.932599][T10302] IPVS: ftp: loaded support on port[0] = 21 [ 135.954046][T10283] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 136.013444][T10319] fuse: Unknown parameter 'max_ˆe{d' [ 136.020017][T10283] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/9/cgroup.controllers PID: 10283 Comm: syz-executor.2 [ 136.030244][T10322] fuse: Unknown parameter 'max_ˆe{d' [ 136.037582][T10328] fuse: Unknown parameter 'max_ˆe{d' [ 136.064929][T10333] fuse: Unknown parameter 'max_ˆe{d' 00:08:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) fcntl$dupfd(r7, 0x0, r7) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:49 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) [ 136.255973][ T27] audit: type=1804 audit(1592525329.812:10): pid=10343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/10/cgroup.controllers" dev="sda1" ino=15821 res=1 00:08:49 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) 00:08:49 executing program 5 (fault-call:0 fault-nth:0): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 136.344056][T10349] fuse: Unknown parameter 'max_ˆe{d' 00:08:49 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r6, 0x23}, &(0x7f0000000200)=0x8) [ 136.395231][T10352] fuse: Unknown parameter 'max_ˆe{d' 00:08:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) fcntl$dupfd(r7, 0x0, r7) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 136.433858][T10302] IPVS: ftp: loaded support on port[0] = 21 [ 136.441279][T10355] FAULT_INJECTION: forcing a failure. [ 136.441279][T10355] name failslab, interval 1, probability 0, space 0, times 1 [ 136.475502][T10355] CPU: 1 PID: 10355 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 136.484322][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.494400][T10355] Call Trace: [ 136.497682][T10355] dump_stack+0x10f/0x19d [ 136.502002][T10355] should_fail+0x23c/0x250 [ 136.506408][T10355] __should_failslab+0x81/0x90 [ 136.511158][T10355] should_failslab+0x5/0x20 [ 136.515647][T10355] kmem_cache_alloc+0x29/0x2b0 [ 136.520401][T10355] ? getname_flags+0x84/0x3d0 [ 136.525066][T10355] getname_flags+0x84/0x3d0 [ 136.529554][T10355] getname+0x15/0x20 [ 136.533494][T10355] do_sys_openat2+0x2f3/0x4a0 [ 136.538156][T10355] __x64_sys_openat+0xef/0x110 [ 136.542974][T10355] do_syscall_64+0x71/0x120 [ 136.547471][T10355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 136.553348][T10355] RIP: 0033:0x45ca59 [ 136.557219][T10355] Code: Bad RIP value. [ 136.561265][T10355] RSP: 002b:00007fb69afcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.569772][T10355] RAX: ffffffffffffffda RBX: 00000000004f85e0 RCX: 000000000045ca59 [ 136.577729][T10355] RDX: 0000000000006001 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 136.585690][T10355] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 136.593646][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 136.601608][T10355] R13: 00000000000007ce R14: 00000000004caa8e R15: 00007fb69afcc6d4 [ 136.612507][ T27] audit: type=1804 audit(1592525330.162:11): pid=10377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/11/cgroup.controllers" dev="sda1" ino=15821 res=1 [ 136.637466][T10385] fuse: Unknown parameter 'max_ˆe{d' 00:08:50 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) 00:08:50 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) 00:08:50 executing program 5 (fault-call:0 fault-nth:1): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) fcntl$dupfd(r7, 0x0, r7) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000140)={0x80000001, 0x0, 0x8, 0x1, &(0x7f0000000100)=[{0x879, 0xff, 0x7, 0x4}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 136.813635][ T7] tipc: TX() has been purged, node left! [ 136.820578][T10391] fuse: Unknown parameter 'max_ˆe{d' [ 136.820753][T10392] fuse: Unknown parameter 'max_ˆe{d' [ 136.864448][T10396] FAULT_INJECTION: forcing a failure. [ 136.864448][T10396] name failslab, interval 1, probability 0, space 0, times 0 [ 136.886846][T10396] CPU: 1 PID: 10396 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 136.895528][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.905569][T10396] Call Trace: [ 136.908885][T10396] dump_stack+0x10f/0x19d [ 136.913204][T10396] should_fail+0x23c/0x250 [ 136.917611][T10396] __should_failslab+0x81/0x90 [ 136.922399][T10396] should_failslab+0x5/0x20 [ 136.926946][T10396] kmem_cache_alloc+0x29/0x2b0 [ 136.931698][T10396] ? __alloc_file+0x2e/0x1f0 [ 136.936275][T10396] __alloc_file+0x2e/0x1f0 [ 136.940755][T10396] alloc_empty_file+0xcd/0x1c0 [ 136.945507][T10396] path_openat+0x6a/0x20e0 [ 136.949929][T10396] ? path_openat+0x1e48/0x20e0 [ 136.954680][T10396] ? kstrtoull+0x30b/0x350 [ 136.959080][T10396] ? kstrtouint_from_user+0x10e/0x120 [ 136.964437][T10396] ? aa_file_perm+0x129/0xe00 [ 136.969107][T10396] ? __rcu_read_unlock+0x4b/0x260 [ 136.974124][T10396] do_filp_open+0xbd/0x1d0 [ 136.978565][T10396] ? expand_files+0x55/0x510 [ 136.983141][T10396] ? __check_object_size+0x237/0x2f0 [ 136.988417][T10396] ? _raw_spin_unlock+0x2e/0x50 [ 136.993258][T10396] ? __alloc_fd+0x33c/0x390 [ 136.997750][T10396] do_sys_openat2+0x33c/0x4a0 [ 137.002413][T10396] __x64_sys_openat+0xef/0x110 [ 137.004519][ T27] audit: type=1804 audit(1592525330.562:12): pid=10397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/12/cgroup.controllers" dev="sda1" ino=15814 res=1 [ 137.007213][T10396] do_syscall_64+0x71/0x120 [ 137.007304][T10396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.041650][T10396] RIP: 0033:0x45ca59 [ 137.045528][T10396] Code: Bad RIP value. [ 137.049576][T10396] RSP: 002b:00007fb69afcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 00:08:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007a40)='/dev/vcs\x00', 0x200180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000180)={0x8, 0x1, 0xfffffffc, 0x80030000, '\x00', 0x1000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x2, 0x0, 0x2}, 0x1c}}, 0x20004004) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000007b40)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3fffffe0efa84fb702779012cc399fff0120e4d880f11df69d540b34750ca7fbdeda1f01000000f3518b90a902adb5fb4cf673249ffef0131bd5691616e663a0a610c22a24e5cf0b00a72710eea4528155781e457447ffe9d2e6eadf70c59d767b4c35a0017227c6316bc14cdf78a502786603687d9ff8a4734819aebca833227dd124c49af8330e5f1024fb13f05fd3d9ef69ac398e1a88ec3f478b6dbe11295a791c9c1df93e", @ANYRES16=r5, @ANYBLOB="041f27bd7000ffdbdf25010000000000ff00924100000014001800004673797a30000000ffffffde00005cfa3ce31b48721bf406e12560e06e3c309c797c2aefceddc51c230eb70313981bb8b202000d4b8085b9a1b17eb669e6dfdcfb52dd73e7d62dcd52c575b26a911a183e39556b7ae3a2972bd4219db506c4d433347acb21e1f34e420467e4c7fd9421c93bb871b0ed62db2fab3137aefb36f8df90242c620ad82e66f112564663ded200373c8ab3b99e67376ae92486de958f607061079606a9090000000000000004b07b209bab3387f932afff138d3511885ba3f16a3d003f3addf1018ededa4f68c730f3e153ff8aecf82cab87dad56c8c4d6b11361dfc905938bb445af255f930a7aae1df39ba30337aac7c7a2a6f63f852409bd9eec51ce3ffb4edbafb7a5945dbfafe9a8cb71c8ab4d62e538be3f75003d1d0bc4593139127cd8d4a000000001d9c43b3f1ca6bad32c0a5dc11339c8528abe675f2488f664ea22187bdad580577db18133d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setreuid(0x0, r3) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x3, @default, r3}) openat$cgroup_type(r4, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0x4, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48001) 00:08:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x80, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x200410c5}, 0x40010) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="770000041000850600"/20, @ANYRES32=r4, @ANYBLOB="17010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) 00:08:50 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r5, 0x23}, &(0x7f0000000200)=0x8) [ 137.057973][T10396] RAX: ffffffffffffffda RBX: 00000000004f85e0 RCX: 000000000045ca59 [ 137.065930][T10396] RDX: 0000000000006001 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 137.073885][T10396] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 137.081845][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 137.089803][T10396] R13: 00000000000007ce R14: 00000000004caa8e R15: 00007fb69afcc6d4 00:08:50 executing program 5 (fault-call:0 fault-nth:2): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 137.178210][T10408] IPVS: ftp: loaded support on port[0] = 21 [ 137.217616][T10425] fuse: Unknown parameter 'max_ˆe{d' [ 137.294274][T10442] FAULT_INJECTION: forcing a failure. [ 137.294274][T10442] name failslab, interval 1, probability 0, space 0, times 0 [ 137.331168][T10442] CPU: 0 PID: 10442 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 137.339915][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.349954][T10442] Call Trace: [ 137.353240][T10442] dump_stack+0x10f/0x19d [ 137.357607][T10442] should_fail+0x23c/0x250 [ 137.362104][T10442] __should_failslab+0x81/0x90 [ 137.366941][T10442] should_failslab+0x5/0x20 [ 137.371489][T10442] kmem_cache_alloc+0x29/0x2b0 [ 137.376257][T10442] ? security_file_alloc+0x30/0x190 [ 137.381437][T10442] security_file_alloc+0x30/0x190 [ 137.386457][T10442] __alloc_file+0x83/0x1f0 [ 137.390866][T10442] alloc_empty_file+0xcd/0x1c0 [ 137.395616][T10442] path_openat+0x6a/0x20e0 [ 137.396700][T10397] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 137.400047][T10442] ? path_openat+0x1e48/0x20e0 [ 137.400059][T10442] ? kstrtoull+0x30b/0x350 [ 137.400127][T10442] ? kstrtouint_from_user+0x10e/0x120 [ 137.426304][T10442] ? aa_file_perm+0x129/0xe00 [ 137.430968][T10442] ? __rcu_read_unlock+0x4b/0x260 [ 137.436008][T10442] do_filp_open+0xbd/0x1d0 [ 137.440406][T10442] ? expand_files+0x55/0x510 [ 137.444983][T10442] ? __check_object_size+0x237/0x2f0 [ 137.450253][T10442] ? _raw_spin_unlock+0x2e/0x50 [ 137.455086][T10442] ? __alloc_fd+0x33c/0x390 [ 137.456695][T10397] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/12/cgroup.controllers PID: 10397 Comm: syz-executor.2 [ 137.459600][T10442] do_sys_openat2+0x33c/0x4a0 [ 137.459645][T10442] __x64_sys_openat+0xef/0x110 [ 137.459725][T10442] do_syscall_64+0x71/0x120 [ 137.485433][T10442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 137.491309][T10442] RIP: 0033:0x45ca59 [ 137.495255][T10442] Code: Bad RIP value. [ 137.499301][T10442] RSP: 002b:00007fb69afcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.507694][T10442] RAX: ffffffffffffffda RBX: 00000000004f85e0 RCX: 000000000045ca59 [ 137.515755][T10442] RDX: 0000000000006001 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 137.523713][T10442] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 137.531670][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 00:08:51 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) 00:08:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007a40)='/dev/vcs\x00', 0x200180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000180)={0x8, 0x1, 0xfffffffc, 0x80030000, '\x00', 0x1000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x2, 0x0, 0x2}, 0x1c}}, 0x20004004) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000007b40)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3fffffe0efa84fb702779012cc399fff0120e4d880f11df69d540b34750ca7fbdeda1f01000000f3518b90a902adb5fb4cf673249ffef0131bd5691616e663a0a610c22a24e5cf0b00a72710eea4528155781e457447ffe9d2e6eadf70c59d767b4c35a0017227c6316bc14cdf78a502786603687d9ff8a4734819aebca833227dd124c49af8330e5f1024fb13f05fd3d9ef69ac398e1a88ec3f478b6dbe11295a791c9c1df93e", @ANYRES16=r5, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setreuid(0x0, r3) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x3, @default, r3}) openat$cgroup_type(r4, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0x4, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48001) [ 137.539696][T10442] R13: 00000000000007ce R14: 00000000004caa8e R15: 00007fb69afcc6d4 [ 137.560073][T10408] IPVS: ftp: loaded support on port[0] = 21 00:08:51 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r5, 0x23}, &(0x7f0000000200)=0x8) 00:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 137.644010][T10469] fuse: Unknown parameter 'max_ˆe{d' [ 137.680428][T10475] fuse: Unknown parameter 'max_ˆe{d' [ 137.742841][ T27] audit: type=1804 audit(1592525331.302:13): pid=10474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/13/cgroup.controllers" dev="sda1" ino=15815 res=1 00:08:51 executing program 5 (fault-call:0 fault-nth:3): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007a40)='/dev/vcs\x00', 0x200180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000180)={0x8, 0x1, 0xfffffffc, 0x80030000, '\x00', 0x1000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x2, 0x0, 0x2}, 0x1c}}, 0x20004004) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000007b40)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3fffffe0efa84fb702779012cc399fff0120e4d880f11df69d540b34750ca7fbdeda1f01000000f3518b90a902adb5fb4cf673249ffef0131bd5691616e663a0a610c22a24e5cf0b00a72710eea4528155781e457447ffe9d2e6eadf70c59d767b4c35a0017227c6316bc14cdf78a502786603687d9ff8a4734819aebca833227dd124c49af8330e5f1024fb13f05fd3d9ef69ac398e1a88ec3f478b6dbe11295a791c9c1df93e", @ANYRES16=r5, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setreuid(0x0, r3) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x3, @default, r3}) openat$cgroup_type(r4, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0x4, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48001) 00:08:51 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r5, 0x23}, &(0x7f0000000200)=0x8) 00:08:51 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 137.859095][T10482] FAULT_INJECTION: forcing a failure. [ 137.859095][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 137.896400][T10482] CPU: 1 PID: 10482 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 137.905085][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.915123][T10482] Call Trace: [ 137.918401][T10482] dump_stack+0x10f/0x19d [ 137.922720][T10482] should_fail+0x23c/0x250 [ 137.927129][T10482] __should_failslab+0x81/0x90 [ 137.931934][T10482] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 137.937639][T10482] should_failslab+0x5/0x20 [ 137.941449][T10488] fuse: Unknown parameter 'max_ˆe{d' [ 137.942203][T10482] __kmalloc+0x43/0x2d0 [ 137.942220][T10482] tomoyo_realpath_from_path+0x98/0x3c0 [ 137.957155][T10482] ? ima_get_action+0x58/0x70 [ 137.961818][T10482] tomoyo_check_open_permission+0xaf/0x370 [ 137.967674][T10482] tomoyo_file_open+0xd0/0xe0 [ 137.972405][T10482] security_file_open+0x3f/0x90 [ 137.977280][T10482] do_dentry_open+0x27c/0x8e0 [ 137.981942][T10482] vfs_open+0x43/0x50 [ 137.985908][T10482] path_openat+0x185f/0x20e0 [ 137.990505][T10482] ? kstrtouint_from_user+0x10e/0x120 [ 137.995885][T10482] ? __rcu_read_unlock+0x4b/0x260 [ 138.000897][T10482] do_filp_open+0xbd/0x1d0 [ 138.005304][T10482] ? _raw_spin_unlock+0x2e/0x50 [ 138.010138][T10482] ? __alloc_fd+0x33c/0x390 [ 138.014624][T10482] do_sys_openat2+0x33c/0x4a0 [ 138.019390][T10482] __x64_sys_openat+0xef/0x110 [ 138.024144][T10482] do_syscall_64+0x71/0x120 [ 138.028638][T10482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 138.034512][T10482] RIP: 0033:0x45ca59 [ 138.038385][T10482] Code: Bad RIP value. [ 138.042453][T10482] RSP: 002b:00007fb69afcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.050844][T10482] RAX: ffffffffffffffda RBX: 00000000004f85e0 RCX: 000000000045ca59 [ 138.058802][T10482] RDX: 0000000000006001 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 138.066761][T10482] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 138.074719][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 138.082671][T10482] R13: 00000000000007ce R14: 00000000004caa8e R15: 00007fb69afcc6d4 [ 138.095322][T10482] ERROR: Out of memory at tomoyo_realpath_from_path. 00:08:51 executing program 5 (fault-call:0 fault-nth:4): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 138.213311][T10503] FAULT_INJECTION: forcing a failure. [ 138.213311][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 138.254413][T10503] CPU: 1 PID: 10503 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 138.263095][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.273132][T10503] Call Trace: [ 138.276412][T10503] dump_stack+0x10f/0x19d [ 138.280734][T10503] should_fail+0x23c/0x250 [ 138.285137][T10503] __should_failslab+0x81/0x90 [ 138.289888][T10503] ? tomoyo_encode2+0x1e2/0x350 [ 138.294723][T10503] should_failslab+0x5/0x20 [ 138.299210][T10503] __kmalloc+0x43/0x2d0 [ 138.303401][T10503] tomoyo_encode2+0x1e2/0x350 [ 138.308062][T10503] tomoyo_realpath_from_path+0x36e/0x3c0 [ 138.313681][T10503] tomoyo_check_open_permission+0xaf/0x370 [ 138.319582][T10503] tomoyo_file_open+0xd0/0xe0 [ 138.324246][T10503] security_file_open+0x3f/0x90 [ 138.329084][T10503] do_dentry_open+0x27c/0x8e0 [ 138.333775][T10503] vfs_open+0x43/0x50 [ 138.337741][T10503] path_openat+0x185f/0x20e0 [ 138.342320][T10503] ? kstrtouint_from_user+0x10e/0x120 [ 138.347685][T10503] ? __rcu_read_unlock+0x4b/0x260 [ 138.352698][T10503] do_filp_open+0xbd/0x1d0 [ 138.357105][T10503] ? _raw_spin_unlock+0x2e/0x50 [ 138.361935][T10503] ? __alloc_fd+0x33c/0x390 [ 138.366474][T10503] do_sys_openat2+0x33c/0x4a0 [ 138.371143][T10503] __x64_sys_openat+0xef/0x110 [ 138.375895][T10503] do_syscall_64+0x71/0x120 [ 138.380390][T10503] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 138.386292][T10503] RIP: 0033:0x45ca59 [ 138.390161][T10503] Code: Bad RIP value. [ 138.394202][T10503] RSP: 002b:00007fb69afcbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 00:08:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:52 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) [ 138.402593][T10503] RAX: ffffffffffffffda RBX: 00000000004f85e0 RCX: 000000000045ca59 [ 138.410545][T10503] RDX: 0000000000006001 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 138.418505][T10503] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 138.426501][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 138.434458][T10503] R13: 00000000000007ce R14: 00000000004caa8e R15: 00007fb69afcc6d4 00:08:52 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x98}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 138.511215][T10513] mmap: syz-executor.0 (10513) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 138.527347][T10512] fuse: Unknown parameter 'max_ˆe{d' [ 138.534146][T10514] fuse: Unknown parameter 'max_ˆe{d' 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) [ 138.551641][ T27] audit: type=1804 audit(1592525332.102:14): pid=10510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/14/cgroup.controllers" dev="sda1" ino=15829 res=1 00:08:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x1, 0x84) 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) [ 138.680774][T10519] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.719211][ T27] audit: type=1800 audit(1592525332.272:15): pid=10522 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15826 res=0 [ 138.728240][T10510] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 138.769230][T10526] fuse: Unknown parameter 'max_ˆe{d' [ 138.791111][T10510] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/14/cgroup.controllers PID: 10510 Comm: syz-executor.2 00:08:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:08:52 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) [ 138.831826][T10503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.850352][ T27] audit: type=1800 audit(1592525332.402:16): pid=10522 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15826 res=0 00:08:52 executing program 5 (fault-call:0 fault-nth:5): openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) 00:08:52 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x98}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 138.932182][T10535] fuse: Unknown parameter 'max_ˆe{d' 00:08:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 00:08:52 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) [ 138.978670][T10540] fuse: Unknown parameter 'max_ˆe{d' 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 139.063172][T10548] fuse: Unknown parameter 'max_ˆe{d' [ 139.088717][ T27] audit: type=1804 audit(1592525332.642:17): pid=10551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/15/cgroup.controllers" dev="sda1" ino=15809 res=1 00:08:52 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) 00:08:52 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6003, 0x0) 00:08:52 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 139.191105][ T27] audit: type=1800 audit(1592525332.742:18): pid=10550 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15816 res=0 [ 139.242415][T10541] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 139.255754][T10561] fuse: Unknown parameter 'max_ˆe{d' 00:08:52 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:52 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6005, 0x0) [ 139.307827][T10541] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/15/cgroup.controllers PID: 10541 Comm: syz-executor.2 [ 139.331679][ T7] tipc: TX() has been purged, node left! 00:08:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:53 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:08:53 executing program 0: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6009, 0x0) 00:08:53 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 139.387908][T10569] fuse: Unknown parameter 'max_ˆe{d' [ 139.467666][T10579] fuse: Unknown parameter 'max_ˆe{d' 00:08:53 executing program 0: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x600b, 0x0) [ 139.489010][T10581] fuse: Unknown parameter 'max_ˆe{d' 00:08:53 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:08:53 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 139.521696][ T7] tipc: TX() has been purged, node left! 00:08:53 executing program 0: remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6090, 0x0) [ 139.616816][T10592] fuse: Unknown parameter 'max_ˆe{d' [ 139.627647][T10593] fuse: Unknown parameter 'max_ˆe{d' [ 139.714634][T10599] fuse: Unknown parameter 'max_ˆe{d' [ 139.715162][T10582] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 00:08:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:53 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:53 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x98}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:08:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:53 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x2) [ 139.780488][T10582] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/16/cgroup.controllers PID: 10582 Comm: syz-executor.2 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x3) 00:08:53 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 139.861163][T10608] fuse: Unknown parameter 'max_ˆe{d' [ 139.869252][T10612] fuse: Unknown parameter 'max_ˆe{d' 00:08:53 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x4) 00:08:53 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 140.058596][T10627] fuse: Unknown parameter 'max_ˆe{d' [ 140.079302][T10628] fuse: Unknown parameter 'max_ˆe{d' 00:08:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5) 00:08:53 executing program 1: mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:53 executing program 0: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)}, {&(0x7f0000001180)="0fffdcda07ac608bfbcc88be2e5848a044bbdc9a427479a2b45455e0b32e91c7952004a32c90f41ce1e94b8a33e118857100f05f4a41c123a6e0dbf00f4c1ff26b85eb860575bee7a9ff551b101e26e8b861ebc83107592322366c71e91b8499e8be191be0eeeef7b031489d17ea765fd88a406cc2cafcd30692aecbd9bd95d5c7c14c118863f1c037c5233f72a2b45316effba5af6224a1b81ef90fe5aabef4bad32dca59b49ffe697c42401583cdfad3d6ee1ae5256406ab83d7", 0xbb}, {&(0x7f0000001240)}, {&(0x7f0000001340)="3f93a53b1ad73fd40133f670ad20a713482cea002d344493cb54d038be31be96ac5577eca595a5718ea24185ad3726330c6f7c458fd4b5a7ab84c8d700312822c19b3696fcb90b950707f3a6a71e813e2676eca49a3da9a2ba878795258642ecaad2d2e9213b48a876ed3de055d274e9cbe8198f903f44d0f2d3bcde500bfac57a76b940beef2a", 0x87}, {&(0x7f0000001400)="19f2512d8cce70d6e5e1c29151eab81f47c21498694804587011d3ec9e7d05625b88db12d0398dc75d24e41612dca804fa6da83f0940aaaef23e55ffb53c5a8c40e9b7ec7a9a064c14d074fe0ea18c547b96380bdaf5e7d1898c96c65fed04b2d74734", 0x63}, {&(0x7f0000001480)="371cad99c70a946ff3c2338031dfc89f8c13d500a3f867f75e374045c54b32aa8695afb65a41bff736ecfc28770744c94ab59dd41cb1ce2d51e470b027ac286fc7f4f28fd61bf57dfbcf0e034faa0b2cc6ba3a550324a97c68f796513bf2f15fe7e4dba939b10c218503ada208cbc03a5c1f86d24f58326375e751e049c584ac69ec13e86dee351b7e64082206bad8206da3a3cb673faa64be65fa9a943e7287be1cddaf1b31aa5837038078", 0xac}, {&(0x7f0000001540)}, {&(0x7f0000000040)="2556eb60f425a77a959fc4fad053175e4143cc346584", 0x16}], 0x8}, 0x44054) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) [ 140.178003][T10613] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 140.190460][T10613] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/17/cgroup.controllers PID: 10613 Comm: syz-executor.2 [ 140.280701][T10644] fuse: Unknown parameter 'max_ˆe{d' 00:08:53 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x6) 00:08:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'veth1_vlan\x00', 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 00:08:53 executing program 1: mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:53 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x7) [ 140.484052][T10658] fuse: Unknown parameter 'max_ˆe{d' 00:08:54 executing program 1: mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)}, {&(0x7f0000001180)="0fffdcda07ac608bfbcc88be2e5848a044bbdc9a427479a2b45455e0b32e91c7952004a32c90f41ce1e94b8a33e118857100f05f4a41c123a6e0dbf00f4c1ff26b85eb860575bee7a9ff551b101e26e8b861ebc83107592322366c71e91b8499e8be191be0eeeef7b031489d17ea765fd88a406cc2cafcd30692aecbd9bd95d5c7c14c118863f1c037c5233f72a2b45316effba5af6224a1b81ef90fe5aabef4bad32dca59b49ffe697c42401583cdfad3d6ee1ae5256406ab83d7", 0xbb}, {&(0x7f0000001240)}, {&(0x7f0000001340)="3f93a53b1ad73fd40133f670ad20a713482cea002d344493cb54d038be31be96ac5577eca595a5718ea24185ad3726330c6f7c458fd4b5a7ab84c8d700312822c19b3696fcb90b950707f3a6a71e813e2676eca49a3da9a2ba878795258642ecaad2d2e9213b48a876ed3de055d274e9cbe8198f903f44d0f2d3bcde500bfac57a76b940beef2a", 0x87}, {&(0x7f0000001400)="19f2512d8cce70d6e5e1c29151eab81f47c21498694804587011d3ec9e7d05625b88db12d0398dc75d24e41612dca804fa6da83f0940aaaef23e55ffb53c5a8c40e9b7ec7a9a064c14d074fe0ea18c547b96380bdaf5e7d1898c96c65fed04b2d74734", 0x63}, {&(0x7f0000001480)="371cad99c70a946ff3c2338031dfc89f8c13d500a3f867f75e374045c54b32aa8695afb65a41bff736ecfc28770744c94ab59dd41cb1ce2d51e470b027ac286fc7f4f28fd61bf57dfbcf0e034faa0b2cc6ba3a550324a97c68f796513bf2f15fe7e4dba939b10c218503ada208cbc03a5c1f86d24f58326375e751e049c584ac69ec13e86dee351b7e64082206bad8206da3a3cb673faa64be65fa9a943e7287be1cddaf1b31aa5837038078", 0xac}, {&(0x7f0000001540)}, {&(0x7f0000000040)="2556eb60f425a77a959fc4fad053175e4143cc346584", 0x16}], 0x8}, 0x44054) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 00:08:54 executing program 1: mknod$loop(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:54 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x8) 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x9) [ 140.739235][T10681] fuse: Unknown parameter 'max_ˆe{d' 00:08:54 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)}, {&(0x7f0000001180)="0fffdcda07ac608bfbcc88be2e5848a044bbdc9a427479a2b45455e0b32e91c7952004a32c90f41ce1e94b8a33e118857100f05f4a41c123a6e0dbf00f4c1ff26b85eb860575bee7a9ff551b101e26e8b861ebc83107592322366c71e91b8499e8be191be0eeeef7b031489d17ea765fd88a406cc2cafcd30692aecbd9bd95d5c7c14c118863f1c037c5233f72a2b45316effba5af6224a1b81ef90fe5aabef4bad32dca59b49ffe697c42401583cdfad3d6ee1ae5256406ab83d7", 0xbb}, {&(0x7f0000001240)}, {&(0x7f0000001340)="3f93a53b1ad73fd40133f670ad20a713482cea002d344493cb54d038be31be96ac5577eca595a5718ea24185ad3726330c6f7c458fd4b5a7ab84c8d700312822c19b3696fcb90b950707f3a6a71e813e2676eca49a3da9a2ba878795258642ecaad2d2e9213b48a876ed3de055d274e9cbe8198f903f44d0f2d3bcde500bfac57a76b940beef2a", 0x87}, {&(0x7f0000001400)="19f2512d8cce70d6e5e1c29151eab81f47c21498694804587011d3ec9e7d05625b88db12d0398dc75d24e41612dca804fa6da83f0940aaaef23e55ffb53c5a8c40e9b7ec7a9a064c14d074fe0ea18c547b96380bdaf5e7d1898c96c65fed04b2d74734", 0x63}, {&(0x7f0000001480)="371cad99c70a946ff3c2338031dfc89f8c13d500a3f867f75e374045c54b32aa8695afb65a41bff736ecfc28770744c94ab59dd41cb1ce2d51e470b027ac286fc7f4f28fd61bf57dfbcf0e034faa0b2cc6ba3a550324a97c68f796513bf2f15fe7e4dba939b10c218503ada208cbc03a5c1f86d24f58326375e751e049c584ac69ec13e86dee351b7e64082206bad8206da3a3cb673faa64be65fa9a943e7287be1cddaf1b31aa5837038078", 0xac}, {&(0x7f0000001540)}, {&(0x7f0000000040)="2556eb60f425a77a959fc4fad053175e4143cc346584", 0x16}], 0x8}, 0x44054) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 00:08:54 executing program 1: mknod$loop(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) [ 140.830235][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 140.830288][ T27] audit: type=1804 audit(1592525334.382:26): pid=10683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/19/cgroup.controllers" dev="sda1" ino=15859 res=1 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xa) [ 140.949768][T10693] fuse: Unknown parameter 'max_ˆe{d' 00:08:54 executing program 1: mknod$loop(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:54 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 141.004678][ T27] audit: type=1800 audit(1592525334.472:27): pid=10678 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15808 res=0 [ 141.087151][T10705] fuse: Unknown parameter 'max_ˆe{d' [ 141.099313][ T27] audit: type=1800 audit(1592525334.612:28): pid=10700 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15804 res=0 [ 141.142195][T10683] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 141.159844][T10683] File: /root/syzkaller-testdir112586813/syzkaller.D2iWNT/19/cgroup.controllers PID: 10683 Comm: syz-executor.2 00:08:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)}, {&(0x7f0000001180)="0fffdcda07ac608bfbcc88be2e5848a044bbdc9a427479a2b45455e0b32e91c7952004a32c90f41ce1e94b8a33e118857100f05f4a41c123a6e0dbf00f4c1ff26b85eb860575bee7a9ff551b101e26e8b861ebc83107592322366c71e91b8499e8be191be0eeeef7b031489d17ea765fd88a406cc2cafcd30692aecbd9bd95d5c7c14c118863f1c037c5233f72a2b45316effba5af6224a1b81ef90fe5aabef4bad32dca59b49ffe697c42401583cdfad3d6ee1ae5256406ab83d7", 0xbb}, {&(0x7f0000001240)}, {&(0x7f0000001340)="3f93a53b1ad73fd40133f670ad20a713482cea002d344493cb54d038be31be96ac5577eca595a5718ea24185ad3726330c6f7c458fd4b5a7ab84c8d700312822c19b3696fcb90b950707f3a6a71e813e2676eca49a3da9a2ba878795258642ecaad2d2e9213b48a876ed3de055d274e9cbe8198f903f44d0f2d3bcde500bfac57a76b940beef2a", 0x87}, {&(0x7f0000001400)="19f2512d8cce70d6e5e1c29151eab81f47c21498694804587011d3ec9e7d05625b88db12d0398dc75d24e41612dca804fa6da83f0940aaaef23e55ffb53c5a8c40e9b7ec7a9a064c14d074fe0ea18c547b96380bdaf5e7d1898c96c65fed04b2d74734", 0x63}, {&(0x7f0000001480)="371cad99c70a946ff3c2338031dfc89f8c13d500a3f867f75e374045c54b32aa8695afb65a41bff736ecfc28770744c94ab59dd41cb1ce2d51e470b027ac286fc7f4f28fd61bf57dfbcf0e034faa0b2cc6ba3a550324a97c68f796513bf2f15fe7e4dba939b10c218503ada208cbc03a5c1f86d24f58326375e751e049c584ac69ec13e86dee351b7e64082206bad8206da3a3cb673faa64be65fa9a943e7287be1cddaf1b31aa5837038078", 0xac}, {&(0x7f0000001540)}, {&(0x7f0000000040)="2556eb60f425a77a959fc4fad053175e4143cc346584", 0x16}], 0x8}, 0x44054) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 00:08:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)}, {&(0x7f0000001180)="0fffdcda07ac608bfbcc88be2e5848a044bbdc9a427479a2b45455e0b32e91c7952004a32c90f41ce1e94b8a33e118857100f05f4a41c123a6e0dbf00f4c1ff26b85eb860575bee7a9ff551b101e26e8b861ebc83107592322366c71e91b8499e8be191be0eeeef7b031489d17ea765fd88a406cc2cafcd30692aecbd9bd95d5c7c14c118863f1c037c5233f72a2b45316effba5af6224a1b81ef90fe5aabef4bad32dca59b49ffe697c42401583cdfad3d6ee1ae5256406ab83d7", 0xbb}, {&(0x7f0000001240)}, {&(0x7f0000001340)="3f93a53b1ad73fd40133f670ad20a713482cea002d344493cb54d038be31be96ac5577eca595a5718ea24185ad3726330c6f7c458fd4b5a7ab84c8d700312822c19b3696fcb90b950707f3a6a71e813e2676eca49a3da9a2ba878795258642ecaad2d2e9213b48a876ed3de055d274e9cbe8198f903f44d0f2d3bcde500bfac57a76b940beef2a", 0x87}, {&(0x7f0000001400)="19f2512d8cce70d6e5e1c29151eab81f47c21498694804587011d3ec9e7d05625b88db12d0398dc75d24e41612dca804fa6da83f0940aaaef23e55ffb53c5a8c40e9b7ec7a9a064c14d074fe0ea18c547b96380bdaf5e7d1898c96c65fed04b2d74734", 0x63}, {&(0x7f0000001480)="371cad99c70a946ff3c2338031dfc89f8c13d500a3f867f75e374045c54b32aa8695afb65a41bff736ecfc28770744c94ab59dd41cb1ce2d51e470b027ac286fc7f4f28fd61bf57dfbcf0e034faa0b2cc6ba3a550324a97c68f796513bf2f15fe7e4dba939b10c218503ada208cbc03a5c1f86d24f58326375e751e049c584ac69ec13e86dee351b7e64082206bad8206da3a3cb673faa64be65fa9a943e7287be1cddaf1b31aa5837038078", 0xac}, {&(0x7f0000001540)}, {&(0x7f0000000040)="2556eb60f425a77a959fc4fad053175e4143cc346584", 0x16}], 0x8}, 0x44054) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c004}, 0x4000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001640)) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 00:08:54 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xb) 00:08:54 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:54 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) [ 141.280064][T10721] fuse: Unknown parameter 'max_ˆe{d' 00:08:54 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xc) 00:08:54 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 141.376701][ T27] audit: type=1804 audit(1592525334.932:29): pid=10722 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/20/cgroup.controllers" dev="sda1" ino=15840 res=1 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xd) [ 141.496841][T10736] fuse: Unknown parameter 'max_ˆe{d' [ 141.505370][ T27] audit: type=1800 audit(1592525335.002:30): pid=10731 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15843 res=0 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) [ 141.574829][ T27] audit: type=1800 audit(1592525335.042:31): pid=10718 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15863 res=0 [ 141.661635][ T7] tipc: TX() has been purged, node left! 00:08:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:55 executing program 4 (fault-call:1 fault-nth:0): mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xe) 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) 00:08:55 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:55 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x10) 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) [ 141.888507][ T27] audit: type=1804 audit(1592525335.442:32): pid=10755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/21/cgroup.controllers" dev="sda1" ino=15863 res=1 [ 141.890632][T10767] fuse: Unknown parameter 'max_ˆe{d' 00:08:55 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x0) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x11) [ 141.943264][T10759] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:08:55 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000000000000, 0x0, 0x0) 00:08:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x12) 00:08:55 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x25) 00:08:55 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1000000, 0x0) 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 00:08:55 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x100000000000000, 0x0) [ 142.274099][ T27] audit: type=1804 audit(1592525335.832:33): pid=10789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/22/cgroup.controllers" dev="sda1" ino=15804 res=1 [ 142.318949][T10800] fuse: Unknown parameter 'max_ˆe{d' 00:08:55 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, 0x0) 00:08:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5c) 00:08:55 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:56 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x1000000) 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x300) 00:08:56 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x500) 00:08:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:56 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x100000000000000) [ 142.712073][T10824] fuse: Unknown parameter 'max_ˆe{d' [ 142.726840][ T27] audit: type=1804 audit(1592525336.282:34): pid=10820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/23/cgroup.controllers" dev="sda1" ino=15852 res=1 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x600) [ 142.762296][T10828] fuse: Bad value for 'group_id' 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0]) 00:08:56 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2000000000, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dca8f40f60b3ff6cf9cdbe478343543b8769ca7a4eb013972d30765826b96fad40b6f7d78d993e65eea9ef422d5f0984d5842e8cd67f30d07f414bf177b95cd6b5b6cdf2f2305f943d09f9a321f2365c12c1297382c60c39573942a3139310dd440b546eebb770954e9d0b117", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$FIONCLEX(r0, 0x5450) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000240)={0x1f0, 0x1d, &(0x7f0000000a00)}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0x1) uselib(&(0x7f0000000300)='./file0\x00') ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa, 0x1, 'limit\x00'}, @void}}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSET={0x334, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x15, 0xd, 0x1, 0x0, "4a1d57a4ca467851e1847aa61683c4db8e"}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x2f0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf64}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x569}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2d5e39}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3800000}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb7e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3d46ec4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5f8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ef4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x205bd55}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd226000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xccf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "d8c9b2bd5d484bdd742707ca39d33c17cdecaa3383e65fce7ee6f3a3cc8253236cc49318de13e9c583ec89d5ec3a6abf20109ed4d3f76f725af98c16e56612c3813df02a84a772fe9ab19e2412543c485d979a05a7f46337bb16faf92424a6cf380ddd19edb9b0ba3d000c1eacabd5e0733a433cd034ddfcab7146b5a3770b368bcfc1a105"}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22eb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x7c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_USERDATA={0x20, 0xd, 0x1, 0x0, "172313bb283eb53e155889d0a804cb55aa006382e146ff9cbf7e5ead"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa, 0x1, 'redir\x00'}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80}]}], {0x14}}, 0x674}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 00:08:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x700) 00:08:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:56 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x1, 0xaf0, 0x4, 0x4, 0xa}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x1}, 0x16, 0x3) 00:08:56 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=']) 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x900) [ 143.127268][T10854] fuse: Unknown parameter 'max_ˆe{d' 00:08:56 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX]) [ 143.153251][ T27] audit: type=1804 audit(1592525336.712:35): pid=10853 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/24/cgroup.controllers" dev="sda1" ino=15808 res=1 [ 143.186485][T10858] fuse: Bad value for 'user_id' 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xa00) 00:08:56 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x18000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r3, 0xffffffff}, &(0x7f0000000080)=0x8) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:56 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x200000a, 0x810, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netpci0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="39030000000000200000c58000000000"]}) 00:08:56 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xb00) 00:08:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX]) 00:08:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:57 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xc00) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 143.550644][T10888] fuse: Unknown parameter 'max_ˆe{d' 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX]) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xd00) 00:08:57 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 143.794290][T10907] fuse: Unknown parameter 'max_ˆe{d' 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xe00) 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000002) 00:08:57 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000300)=0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2000000, &(0x7f0000000400)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_L='version=9p2000.L'}, {@version_u='version=9p2000.u'}, {@mmap='mmap'}], [{@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_lt={'fowner<', r4}}, {@euid_gt={'euid>', r6}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@hash='hash'}, {@euid_gt={'euid>', r8}}, {@fsname={'fsname', 0x3d, 'rfdno'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff8}}]}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x8800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @remote}}}, 0x88) 00:08:57 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1100) 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 144.056154][T10929] fuse: Unknown parameter 'max_ˆe{d' 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1200) 00:08:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:08:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000002) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000']) 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1f00) [ 144.274650][T10951] fuse: Invalid rootmode 00:08:57 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:57 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f88657b643d3078303030303030303030303030303030302c00"]) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:57 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x2500) 00:08:57 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 144.382704][T10959] fuse: Unknown parameter 'max_ˆe{d' 00:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000002) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5c00) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:58 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x20001, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x40, 0x81, 0x79, 0x770}, {0x6, 0x81, 0x4, 0x3ff}, {0xff, 0x9, 0x1, 0x6}, {0xfc01, 0x0, 0xb2, 0x2}, {0x9, 0x8, 0x1f, 0x4}]}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xa00000, 0x800, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980924, 0x9, [], @value64=0x10000}}) madvise(&(0x7f00004b3000/0x1000)=nil, 0x1000, 0x13) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000100)=0x2) recvmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/21, 0x15}], 0x1}, 0x40012000) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x4, 0x4) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000140)) ftruncate(r0, 0x12) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1000000) 00:08:58 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x2000000) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB]) 00:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 00:08:58 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x3000000) 00:08:58 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=0']) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x4000000) 00:08:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000001200)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001100)={'batadv0\x00'}) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000010c0)=0x10) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) connect$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x9}, 0x1c) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001180)={0x28, 0x2, 0x0, {0x3, 0x9, 0x80}}, 0x28) 00:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 00:08:58 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 144.887977][T11002] fuse: Invalid rootmode 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',']) 00:08:58 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5000000) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',']) 00:08:58 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 145.043148][T11012] overlayfs: failed to resolve './file0': -2 00:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x6000000) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',']) 00:08:58 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x20) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000100)="79db8b7c4d41a00236dea15b3879532ae00aca95660be23d9181bcd6aa856a65286a55eb44f76f8e8c2be964cc6835a2724675339ba92140216ce7ce3e9b751c55c184277135c28f77ab8ea02d9cc6eddafb547d3f78de0aac8772febb1c5600a81e447b620f843e88af54020022727af92812430c3b4f671bc073bc1b0afb3552223b5e4b21058c0faf86fa861252fb2e275ce654cc39057d71cd99a28832fef277e96a68f87c4ee9d7bcc0eb6b85cf76aeb0cd30ff0740fc0c8e6e264d446ebd395a87c6bd1bcc39ae9050cc61865b10f7efe71a60c008daf0f168ecc5a233e5421b69ae48e7a7fad8c19a", &(0x7f0000000200)=""/227}, 0x20) [ 145.176976][T11026] overlayfs: failed to resolve './file0': -2 00:08:58 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x7000000) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootm']) 00:08:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x8000000) 00:08:58 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x9004200) [ 145.322425][T11039] overlayfs: failed to resolve './file0': -2 [ 145.332136][T11041] fuse: Unknown parameter 'rootm' 00:08:58 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x9000000) 00:08:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootm']) 00:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:58 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xa000000) 00:08:59 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0xa00000, 0x100, 0x7ff, r0, 0x0, &(0x7f0000000000)={0x98091f, 0x3, [], @ptr=0x3}}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 145.470258][T11058] fuse: Unknown parameter 'rootm' 00:08:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xb000000) 00:08:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootm']) 00:08:59 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 145.609011][T11073] fuse: Unknown parameter 'rootm' 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xc000000) 00:08:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) 00:08:59 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 145.728335][T11086] fuse: Bad value for 'rootmode' 00:08:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xd000000) 00:08:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:08:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) 00:08:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x320020) remap_file_pages(&(0x7f0000476000/0x4000)=nil, 0x4000, 0x2000008, 0x32, 0x4000000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) r3 = pidfd_getfd(r1, r2, 0x0) mq_unlink(&(0x7f00000010c0)='rfdno') sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1412, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) [ 145.867347][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 145.867359][ T27] audit: type=1804 audit(1592525339.422:40): pid=11070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/32/cgroup.controllers" dev="sda1" ino=15739 res=1 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xe000000) 00:08:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) [ 145.945932][T11096] fuse: Bad value for 'rootmode' [ 145.963840][T11095] overlayfs: failed to resolve './file1': -2 00:08:59 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x10000000) [ 146.047482][T11106] fuse: Bad value for 'rootmode' 00:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x11000000) [ 146.110719][T11112] overlayfs: failed to resolve './file1': -2 00:08:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:00 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x12000000) [ 146.446208][ T27] audit: type=1804 audit(1592525340.002:41): pid=11119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/33/cgroup.controllers" dev="sda1" ino=15875 res=1 [ 146.481690][T11128] overlayfs: failed to resolve './file1': -2 00:09:00 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode=']) 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1f000000) 00:09:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:00 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 146.580433][T11138] overlayfs: failed to resolve './file1': -2 [ 146.593301][T11137] fuse: Bad value for 'rootmode' 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x25000000) 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) 00:09:00 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5c000000) [ 146.707461][T11150] fuse: Bad value for 'rootmode' 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) [ 146.758191][T11153] overlayfs: failed to resolve './file1': -2 [ 146.797328][T11158] fuse: Bad value for 'rootmode' 00:09:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:00 executing program 0: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xf6ffffff) 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYRESHEX, @ANYBLOB=',rootmode']) 00:09:00 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200001, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) [ 147.028253][ T27] audit: type=1804 audit(1592525340.582:42): pid=11156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/34/cgroup.controllers" dev="sda1" ino=15919 res=1 [ 147.103775][T11168] fuse: Bad value for 'rootmode' [ 147.109297][T11167] overlayfs: failed to resolve './file1': -2 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmode=']) 00:09:00 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:00 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xfffffff6) 00:09:00 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4480, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x99, "5a549d0c5fc161308e8d3459aa8b1476640cd423c65bbb4b202db77c759ca59220afb3a0dac5185cb4ab92b799e185f50a522682f0acc53c17eccad2f0e65b05f7815635b9fd7f88aaca6c26be6446bccd67986d7e46eac913f5da7252581eab177dacf5715fb28387b49f0fc3bf8589c0961fb019aa1b2a6f86f7f84c65f313f5e6b31aa879495bee98501ea914b2d11624116dc355dd3876"}, &(0x7f00000001c0)=0xbd) r1 = socket$inet6(0xa, 0x1, 0x84) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r2, 0x52000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0xffff30ac, @loopback, 0x2}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x2, &(0x7f0000001180)=""/4079, &(0x7f00000000c0)=0xfef) mmap(&(0x7f0000329000/0x4000)=nil, 0x4000, 0x100000a, 0x10010, r1, 0x2c8ea000) [ 147.253000][T11176] fuse: Bad value for 'rootmode' 00:09:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB]) [ 147.376638][ T27] audit: type=1804 audit(1592525340.932:43): pid=11183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/35/cgroup.controllers" dev="sda1" ino=15923 res=1 00:09:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1000000000000) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:01 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x1000000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB]) 00:09:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB]) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x100000000000000) 00:09:01 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) recvmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000000180)=""/144, 0x90}], 0x2, &(0x7f0000000280)=""/102, 0x66}, 0x12000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',root']) 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x200000000000000) [ 147.771764][ T27] audit: type=1804 audit(1592525341.332:44): pid=11211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/36/cgroup.controllers" dev="sda1" ino=15942 res=1 [ 147.849598][T11225] fuse: Unknown parameter 'root' 00:09:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x5, 0x31, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000010c0)=0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x300000d, 0x2, 0x1000) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',root']) 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x300000000000000) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',root']) [ 147.946743][T11234] fuse: Unknown parameter 'root' 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x400000000000000) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 147.990135][T11237] overlayfs: failed to resolve './file0': -2 [ 148.029790][T11243] fuse: Unknown parameter 'root' 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmod']) [ 148.089700][ T27] audit: type=1804 audit(1592525341.642:45): pid=11248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/37/cgroup.controllers" dev="sda1" ino=15938 res=1 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x500000000000000) 00:09:01 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x10000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 148.202273][T11253] overlayfs: failed to resolve './file0': -2 [ 148.220714][T11256] fuse: Unknown parameter 'rootmod' 00:09:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x600000000000000) 00:09:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400100, 0x0) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, r0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x800, 0x0) mbind(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x6, 0x5, 0x3) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmod']) 00:09:01 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:01 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x700000000000000) [ 148.316301][T11264] overlayfs: failed to resolve './file0': -2 [ 148.350501][T11270] fuse: Unknown parameter 'rootmod' 00:09:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmod']) 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x800000000000000) 00:09:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 148.486239][T11283] fuse: Unknown parameter 'rootmod' 00:09:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmode']) 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x900000000000000) [ 148.607445][T11298] fuse: Bad value for 'rootmode' 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:02 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$UI_DEV_CREATE(r0, 0x5501) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xa00000000000000) 00:09:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmode']) 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xb00000000000000) [ 148.849310][T11315] fuse: Bad value for 'rootmode' 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',rootmode']) 00:09:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xc00000000000000) 00:09:02 executing program 4: mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rpdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d4b56063de00ae58f5c0a57e829de550d4e87f70678044a2dcea7072b7c0f51e67774dc5b07d14894b0508872cad4476fa764983bc5a6e9a7ef17594c5b07d42a", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x4d000000) exit(0x200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x9, 0x0, 0x3) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='],-\\/-^\xf0\x00', r0}, 0x10) 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xd00000000000000) [ 149.040589][T11339] fuse: Bad value for 'rootmode' 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xe00000000000000) 00:09:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',rootmode=']) 00:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1000000000000000) 00:09:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:02 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 149.158343][T11355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.182421][T11358] fuse: Bad value for 'rootmode' 00:09:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',rootmode=']) [ 149.284865][T11367] fuse: Bad value for 'rootmode' [ 149.319713][ T27] audit: type=1804 audit(1592525342.872:46): pid=11362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/44/cgroup.controllers" dev="sda1" ino=15938 res=1 00:09:03 executing program 4: io_setup(0x3f, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, r0, 0x0) remap_file_pages(&(0x7f000032d000/0x3000)=nil, 0x3000, 0x0, 0xffffffffd8c9d808, 0x2021000) 00:09:03 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1100000000000000) 00:09:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',rootmode=']) 00:09:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:03 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1200000000000000) [ 149.866446][T11389] fuse: Bad value for 'rootmode' 00:09:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=']) [ 149.916670][ T27] audit: type=1804 audit(1592525343.472:47): pid=11388 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/45/cgroup.controllers" dev="sda1" ino=15959 res=1 00:09:03 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x1f00000000000000) 00:09:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 150.039562][T11407] fuse: Bad value for 'rootmode' [ 150.122908][T11412] overlayfs: missing 'lowerdir' 00:09:03 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x2500000000000000) 00:09:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=']) 00:09:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:03 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x5c00000000000000) 00:09:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 150.263100][T11423] fuse: Bad value for 'rootmode' [ 150.278516][T11426] overlayfs: missing 'lowerdir' 00:09:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=']) 00:09:03 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x4000010, 0xffffffffffffffff, 0x26ca1000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000004, 0x10000, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x91}}) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgrcv(r0, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x3, 0x2000) msgrcv(r0, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/179) [ 150.333686][ T27] audit: type=1804 audit(1592525343.892:48): pid=11424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/46/cgroup.controllers" dev="sda1" ino=15963 res=1 00:09:03 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xf6ffffff00000000) [ 150.420600][T11436] fuse: Bad value for 'rootmode' 00:09:04 executing program 1: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 150.445980][T11438] overlayfs: missing 'lowerdir' 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0xffffffff00000000) [ 150.535665][T11448] overlayfs: missing 'lowerdir' 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 150.594802][T11455] overlayfs: missing 'lowerdir' 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x80000001, &(0x7f0000000040)=0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0xd}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x20000, 0x0) fsync(r1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200480, 0x0) 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 150.692110][T11465] overlayfs: missing 'lowerdir' [ 150.697627][ T27] audit: type=1804 audit(1592525344.252:49): pid=11456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/47/cgroup.controllers" dev="sda1" ino=15976 res=1 00:09:04 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = dup(r0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000040)=@deltaction={0x28, 0x30, 0xd13, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:09:04 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000), 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 150.898055][T11480] overlayfs: missing 'lowerdir' 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000), 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 00:09:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f00000012c0)=0xff6) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x8, @ipv4={[], [], @broadcast}}, {0xa, 0x4e21, 0x6, @private2, 0x9}, 0xf801, [0x5, 0x9, 0x6, 0x0, 0x8, 0x55, 0x49, 0x6]}, 0x5c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x210000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101800, 0x0) ioctl$TCGETA(r2, 0x560b, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x52000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000080)=""/19) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0x1029) r4 = syz_open_dev$vcsn(&(0x7f0000001200)='/dev/vcs#\x00', 0x3, 0x200280) io_submit(0x0, 0x2, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x101, r3, &(0x7f00000010c0)='W', 0x1, 0x8bdb, 0x0, 0xe222fbfe0cb69e12}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0x1000, 0xffffffffffffffff, &(0x7f0000001180)="e2fb19838cf1d4067ab92ff894d8c307e9ecffcd4ac63fb2a25edd743fc19f8c170fdc9cb906978fd0451dc2603da26737ee32ab99242a6de73eb716bd5c5e07a744efe652e5cb86f893555c7db8e953568e40191b843360859eae016bc203144ed7186d24994aedd848a843", 0x6c, 0x7, 0x0, 0x2, r4}]) sched_yield() [ 151.024255][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 151.024267][ T27] audit: type=1804 audit(1592525344.582:51): pid=11490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir112586813/syzkaller.D2iWNT/48/cgroup.controllers" dev="sda1" ino=15977 res=1 00:09:04 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x2d}, 0x10) splice(r1, &(0x7f0000000040)=0x5, 0xffffffffffffffff, &(0x7f0000000080)=0xffffffff83b357b4, 0x1, 0x2) [ 151.071960][T11496] overlayfs: missing 'lowerdir' 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000), 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 4: mmap(&(0x7f0000478000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 151.232812][ T27] audit: type=1804 audit(1592525344.792:52): pid=11500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366098692/syzkaller.pifcGz/88/cgroup.controllers" dev="sda1" ino=15911 res=1 [ 151.270607][T11517] overlayfs: missing 'lowerdir' 00:09:04 executing program 4: mmap(&(0x7f000042f000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 00:09:04 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 00:09:04 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 00:09:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f00000000c0)=""/4086, &(0x7f0000001140)=0xff6) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x23}, &(0x7f0000000200)=0x8) [ 151.377936][ T9181] ================================================================== [ 151.386058][ T9181] BUG: KCSAN: data-race in ext4_mb_regular_allocator / mb_free_blocks [ 151.394188][ T9181] [ 151.396511][ T9181] write to 0xffff88812a3af884 of 4 bytes by task 8689 on cpu 1: [ 151.404131][ T9181] mb_free_blocks+0x141/0xf90 [ 151.408802][ T9181] ext4_free_blocks+0xfda/0x1610 [ 151.413728][ T9181] ext4_remove_blocks+0x592/0xa20 [ 151.418739][ T9181] ext4_ext_rm_leaf+0x563/0xe70 [ 151.423607][ T9181] ext4_ext_remove_space+0x8c9/0x1470 [ 151.428968][ T9181] ext4_ext_truncate+0xf9/0x160 [ 151.433812][ T9181] ext4_truncate+0x7a5/0xb40 [ 151.438393][ T9181] ext4_evict_inode+0x9a5/0xbf0 [ 151.443240][ T9181] evict+0x19f/0x470 [ 151.447123][ T9181] iput+0x44a/0x550 [ 151.450918][ T9181] dentry_unlink_inode+0x208/0x220 [ 151.456026][ T9181] d_delete+0x78/0xa0 [ 151.460002][ T9181] vfs_rmdir+0x298/0x2b0 [ 151.464229][ T9181] do_rmdir+0x170/0x320 [ 151.468379][ T9181] __x64_sys_rmdir+0x20/0x30 [ 151.472956][ T9181] do_syscall_64+0x71/0x120 [ 151.477458][ T9181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.483421][ T9181] [ 151.485742][ T9181] read to 0xffff88812a3af884 of 4 bytes by task 9181 on cpu 0: [ 151.493305][ T9181] ext4_mb_regular_allocator+0x67e/0xf90 [ 151.498939][ T9181] ext4_mb_new_blocks+0x304/0xcf0 [ 151.503964][ T9181] ext4_ext_map_blocks+0x164e/0x20c0 [ 151.509235][ T9181] ext4_map_blocks+0x6a6/0xf60 [ 151.513990][ T9181] ext4_getblk+0x67/0x2c0 [ 151.518308][ T9181] ext4_bread+0x3a/0x190 [ 151.522532][ T9181] ext4_append+0xda/0x1c0 00:09:05 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x6001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x444, 0x3f3, 0x8, 0x70bd2b, 0x25dfdbfe, {0x2, 0x2, 0x28, [0x8, 0x3, 0x5, 0x9, 0x8, 0xd0, 0x9, 0x3, 0x6, 0x1f, 0xb19, 0x6, 0x2, 0x7, 0x6, 0x1, 0xbb7c, 0x5, 0x1, 0x1, 0x2, 0xa4, 0x1, 0x200, 0x36, 0x34, 0xde, 0x8, 0x8, 0x8, 0x6c922d41, 0x8, 0x4, 0x8, 0xbc1, 0x9, 0x4, 0x7, 0x10000, 0x1, 0x5, 0x0, 0x4, 0x4, 0x0, 0xff, 0x4, 0x200, 0x29, 0x2, 0x9, 0x24c, 0x20, 0x3ff, 0x0, 0xfa, 0xffff, 0x8, 0x6e, 0x5, 0x1000, 0x6], [0x7, 0x0, 0xc2c, 0x401, 0x913, 0x1d4, 0xffff, 0x48a, 0x1, 0x7fff, 0x7f, 0x20, 0x7, 0x3f, 0x80000000, 0x5, 0x0, 0x5, 0x4, 0x80000001, 0x81, 0x4, 0x80000000, 0x6, 0xd005, 0x3, 0x3, 0x1, 0x800, 0x1, 0x5, 0xaa9, 0x80000000, 0x7, 0x26, 0x3b5, 0x9, 0x9, 0x7, 0xffffff7f, 0x9, 0x8e70, 0x1, 0x10000, 0x4, 0x9, 0x82, 0x800, 0x0, 0x20, 0x7, 0x7ff, 0x2, 0x0, 0x1, 0xfffffffb, 0x5, 0x1, 0x7, 0xbd2f, 0x40, 0x0, 0x7, 0x3], [0x3, 0xf1, 0x5, 0x7, 0x8, 0x8001, 0x4, 0xf0, 0xfffffffb, 0x5, 0xffff, 0x9e, 0x3, 0x3, 0x3ff, 0x5, 0x7, 0x4eb85f84, 0x3f, 0x9, 0x3, 0x1f, 0x9, 0x7, 0x1d20, 0x4, 0x9, 0x0, 0x10001, 0xef3d, 0x401, 0x1, 0x6d8d, 0xe3, 0x1c000000, 0xb64, 0x401, 0x8, 0x1, 0x100, 0x7fff, 0x8, 0x3, 0x1, 0x5, 0x4, 0x10001, 0x7de, 0xab, 0x2, 0x9, 0x3, 0x4, 0xfc62, 0x13, 0x60cc877a, 0x1, 0x1, 0x4, 0x1, 0x101, 0x1, 0x101, 0x400], [0x0, 0x8000, 0x0, 0x1, 0x5, 0x2, 0x1, 0x3, 0x9, 0x555f349, 0x2, 0x6, 0x1938941a, 0x10001, 0xcbd9, 0x40, 0x9, 0x6, 0x1, 0xff, 0x5, 0x20, 0x1f, 0x4, 0x5, 0x9, 0xff, 0x4, 0x1, 0x0, 0x8, 0xec06, 0x8, 0xfffffffa, 0xa447, 0x400, 0x0, 0x9, 0x4, 0x100, 0x5, 0x0, 0x7f, 0x80000000, 0x259cc790, 0x1, 0x39, 0xffff, 0x800, 0xfffffa15, 0x6, 0x0, 0xc2c7, 0x9, 0xfffffff8, 0x401, 0xff, 0x4a, 0x0, 0x0, 0x4, 0xffffffc2, 0x2, 0x3], 0x24, ['IPVS\x00', '/dev/nvram\x00', '}[\x00', 'syzkaller0\x00', 'sip\x00', '/\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x44}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6bb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x54}}, 0x4) 00:09:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000316000a00", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 151.526852][ T9181] ext4_mkdir+0x480/0xc00 [ 151.531171][ T9181] vfs_mkdir+0x288/0x370 [ 151.535405][ T9181] do_mkdirat+0x132/0x220 [ 151.539723][ T9181] __x64_sys_mkdir+0x32/0x40 [ 151.544299][ T9181] do_syscall_64+0x71/0x120 [ 151.548818][ T9181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.554687][ T9181] [ 151.556999][ T9181] Reported by Kernel Concurrency Sanitizer on: [ 151.563140][ T9181] CPU: 0 PID: 9181 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 151.571712][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.581761][ T9181] ================================================================== [ 151.590540][ T9181] Kernel panic - not syncing: panic_on_warn set ... [ 151.597132][ T9181] CPU: 0 PID: 9181 Comm: syz-executor.5 Not tainted 5.8.0-rc1-syzkaller #0 [ 151.605699][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.615737][ T9181] Call Trace: [ 151.619164][ T9181] dump_stack+0x10f/0x19d [ 151.623486][ T9181] panic+0x1f8/0x63a [ 151.627400][ T9181] ? vprintk_emit+0x44a/0x4f0 [ 151.632091][ T9181] kcsan_report+0x684/0x690 [ 151.636601][ T9181] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 151.642138][ T9181] ? ext4_mb_regular_allocator+0x67e/0xf90 [ 151.647934][ T9181] ? ext4_mb_new_blocks+0x304/0xcf0 [ 151.652640][ T27] audit: type=1804 audit(1592525344.932:53): pid=11531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366098692/syzkaller.pifcGz/89/cgroup.controllers" dev="sda1" ino=15923 res=1 [ 151.653120][ T9181] ? ext4_ext_map_blocks+0x164e/0x20c0 [ 151.653136][ T9181] ? ext4_map_blocks+0x6a6/0xf60 [ 151.687529][ T9181] ? ext4_getblk+0x67/0x2c0 [ 151.692026][ T9181] ? ext4_bread+0x3a/0x190 [ 151.696436][ T9181] ? ext4_append+0xda/0x1c0 [ 151.700936][ T9181] ? ext4_mkdir+0x480/0xc00 [ 151.705439][ T9181] ? vfs_mkdir+0x288/0x370 [ 151.709848][ T9181] ? do_mkdirat+0x132/0x220 [ 151.714436][ T9181] ? __x64_sys_mkdir+0x32/0x40 [ 151.719194][ T9181] ? do_syscall_64+0x71/0x120 [ 151.723865][ T9181] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.729928][ T9181] ? __ext4_handle_dirty_metadata+0x1d2/0x540 [ 151.735989][ T9181] ? __rcu_read_unlock+0x4b/0x260 [ 151.741010][ T9181] ? __rcu_read_unlock+0x4b/0x260 [ 151.746112][ T9181] kcsan_setup_watchpoint+0x453/0x4d0 [ 151.751483][ T9181] ? __rcu_read_unlock+0x4b/0x260 [ 151.756505][ T9181] ext4_mb_regular_allocator+0x67e/0xf90 [ 151.762139][ T9181] ? debug_smp_processor_id+0x18/0x20 [ 151.767853][ T9181] ? kmem_cache_alloc+0x136/0x2b0 [ 151.772872][ T9181] ext4_mb_new_blocks+0x304/0xcf0 [ 151.777894][ T9181] ext4_ext_map_blocks+0x164e/0x20c0 [ 151.783192][ T9181] ext4_map_blocks+0x6a6/0xf60 [ 151.787946][ T9181] ? __brelse+0x2c/0x50 [ 151.792096][ T9181] ext4_getblk+0x67/0x2c0 [ 151.796420][ T9181] ext4_bread+0x3a/0x190 [ 151.800658][ T9181] ext4_append+0xda/0x1c0 [ 151.804979][ T9181] ext4_mkdir+0x480/0xc00 [ 151.809298][ T9181] ? generic_permission+0xe7/0x3e0 [ 151.814399][ T9181] ? inode_permission+0x61/0x330 [ 151.819328][ T9181] vfs_mkdir+0x288/0x370 [ 151.823563][ T9181] do_mkdirat+0x132/0x220 [ 151.827885][ T9181] __x64_sys_mkdir+0x32/0x40 [ 151.832468][ T9181] do_syscall_64+0x71/0x120 [ 151.836961][ T9181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.842835][ T9181] RIP: 0033:0x45bed7 [ 151.847572][ T9181] Code: Bad RIP value. [ 151.851627][ T9181] RSP: 002b:00007ffc3121b7f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 151.860022][ T9181] RAX: ffffffffffffffda RBX: 0000000000024efc RCX: 000000000045bed7 [ 151.868002][ T9181] RDX: 00007ffc3121b845 RSI: 00000000000001ff RDI: 00007ffc3121b840 [ 151.875987][ T9181] RBP: 00000000000000e6 R08: 0000000000000000 R09: 0000000000000005 [ 151.883943][ T9181] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000014 [ 151.891901][ T9181] R13: 00007ffc3121b830 R14: 0000000000024e0d R15: 00007ffc3121b840 [ 151.901122][ T9181] Kernel Offset: disabled [ 151.905475][ T9181] Rebooting in 86400 seconds..