40)='./file0\x00') 01:41:51 executing program 5: 01:41:51 executing program 2: 01:41:51 executing program 0: 01:41:51 executing program 4: 01:41:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:51 executing program 2: [ 439.199867][T10457] FAT-fs (loop3): invalid media value (0x00) 01:41:51 executing program 5: [ 439.243772][T10457] FAT-fs (loop3): Can't find a valid FAT filesystem 01:41:51 executing program 4: 01:41:51 executing program 0: 01:41:51 executing program 2: 01:41:51 executing program 0: 01:41:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:41:52 executing program 5: 01:41:52 executing program 4: 01:41:52 executing program 2: 01:41:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:52 executing program 0: 01:41:52 executing program 2: [ 439.962442][ T42] tipc: TX() has been purged, node left! [ 439.993022][T10486] FAT-fs (loop3): invalid media value (0x00) 01:41:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:41:52 executing program 4: 01:41:52 executing program 5: [ 440.009251][T10486] FAT-fs (loop3): Can't find a valid FAT filesystem 01:41:52 executing program 0: 01:41:52 executing program 2: 01:41:52 executing program 4: 01:41:52 executing program 0: 01:41:52 executing program 5: 01:41:52 executing program 2: 01:41:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:53 executing program 5: 01:41:53 executing program 4: [ 440.925809][T10515] FAT-fs (loop3): invalid media value (0x00) [ 440.975252][T10515] FAT-fs (loop3): Can't find a valid FAT filesystem [ 441.822508][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.831956][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.840450][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.848355][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.857186][ T42] device bridge_slave_1 left promiscuous mode [ 441.863795][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.899751][ T42] device bridge_slave_0 left promiscuous mode [ 441.906417][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.963262][ T42] device veth1_macvtap left promiscuous mode [ 441.969773][ T42] device veth0_macvtap left promiscuous mode [ 441.975812][ T42] device veth1_vlan left promiscuous mode [ 441.982321][ T42] device veth0_vlan left promiscuous mode [ 443.129532][ T42] device hsr_slave_0 left promiscuous mode [ 443.169328][ T42] device hsr_slave_1 left promiscuous mode [ 443.241836][ T42] team0 (unregistering): Port device team_slave_1 removed [ 443.252839][ T42] team0 (unregistering): Port device team_slave_0 removed [ 443.264508][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.343518][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.423312][ T42] bond0 (unregistering): Released all slaves [ 443.546609][T10529] IPVS: ftp: loaded support on port[0] = 21 [ 443.619257][T10529] chnl_net:caif_netlink_parms(): no params data found [ 443.653940][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.662141][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.671667][T10529] device bridge_slave_0 entered promiscuous mode [ 443.679901][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.687224][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.695448][T10529] device bridge_slave_1 entered promiscuous mode [ 443.764861][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.776358][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.805544][T10529] team0: Port device team_slave_0 added [ 443.813047][T10529] team0: Port device team_slave_1 added [ 443.836620][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.846914][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.877701][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.895833][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.903094][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.933738][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.021873][T10529] device hsr_slave_0 entered promiscuous mode [ 444.069668][T10529] device hsr_slave_1 entered promiscuous mode [ 444.112022][T10529] debugfs: Directory 'hsr0' with parent '/' already present! [ 444.157893][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.165168][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.172946][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.180187][T10529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.214671][T10529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.227325][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.236437][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.245294][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.260279][T10529] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.272155][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.281403][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.289436][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.312510][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.321175][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.328503][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.348661][T10529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.360653][T10529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.376855][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.386622][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.396132][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.405195][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.413823][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.421880][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.443872][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.452326][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 444.460969][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.512952][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 444.532369][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.541675][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.550231][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.563746][T10529] device veth0_vlan entered promiscuous mode [ 444.574070][T10529] device veth1_vlan entered promiscuous mode [ 444.592412][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.601493][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.612692][T10529] device veth0_macvtap entered promiscuous mode [ 444.622367][T10529] device veth1_macvtap entered promiscuous mode [ 444.637528][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.648669][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.660238][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.671388][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.681437][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.693004][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.703568][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.714267][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.724483][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 444.736156][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.747712][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.756403][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.765015][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.773199][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.782132][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.793315][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 444.804599][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.814799][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 444.825900][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.837181][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 444.848027][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.858308][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 444.869711][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.880301][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 444.892236][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.904640][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.913808][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.923525][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.137476][ T26] audit: type=1800 audit(1579916517.416:96): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17006 res=0 [ 445.268306][ T26] audit: type=1800 audit(1579916517.546:97): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17006 res=0 [ 445.301096][ T26] audit: type=1800 audit(1579916517.586:98): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17006 res=0 [ 445.372952][ T26] audit: type=1800 audit(1579916517.656:99): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17006 res=0 01:41:58 executing program 2: 01:41:58 executing program 0: 01:41:58 executing program 5: 01:41:58 executing program 4: 01:41:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:58 executing program 0: 01:41:58 executing program 2: 01:41:58 executing program 4: 01:41:58 executing program 5: 01:41:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:58 executing program 2: 01:41:58 executing program 0: 01:41:58 executing program 4: 01:41:58 executing program 5: 01:41:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:41:58 executing program 2: 01:41:58 executing program 4: 01:41:58 executing program 0: 01:41:58 executing program 5: 01:41:58 executing program 2: 01:41:58 executing program 4: [ 446.639262][ T9356] tipc: TX() has been purged, node left! 01:41:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:41:59 executing program 2: 01:41:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:41:59 executing program 4: 01:41:59 executing program 0: 01:41:59 executing program 5: 01:41:59 executing program 4: 01:41:59 executing program 5: 01:41:59 executing program 2: 01:41:59 executing program 0: 01:41:59 executing program 0: 01:41:59 executing program 2: 01:41:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) 01:41:59 executing program 4: [ 448.511980][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.520863][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.529044][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.536937][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.545269][ T9356] device bridge_slave_1 left promiscuous mode [ 448.552172][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.619851][ T9356] device bridge_slave_0 left promiscuous mode [ 448.626517][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.702617][ T9356] device veth1_macvtap left promiscuous mode [ 448.709659][ T9356] device veth0_macvtap left promiscuous mode [ 448.716289][ T9356] device veth1_vlan left promiscuous mode [ 448.722271][ T9356] device veth0_vlan left promiscuous mode [ 449.899505][ T9356] device hsr_slave_0 left promiscuous mode [ 449.949409][ T9356] device hsr_slave_1 left promiscuous mode [ 450.010917][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 450.022743][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 450.033420][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.072387][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.132900][ T9356] bond0 (unregistering): Released all slaves [ 450.235688][T10625] IPVS: ftp: loaded support on port[0] = 21 [ 450.292379][T10625] chnl_net:caif_netlink_parms(): no params data found [ 450.321750][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.329271][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.337557][T10625] device bridge_slave_0 entered promiscuous mode [ 450.379579][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.386875][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.395472][T10625] device bridge_slave_1 entered promiscuous mode [ 450.418565][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.429827][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.454027][T10625] team0: Port device team_slave_0 added [ 450.461573][T10625] team0: Port device team_slave_1 added [ 450.480164][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.487317][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.515054][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.527673][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.535694][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.563303][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.634563][T10625] device hsr_slave_0 entered promiscuous mode [ 450.730092][T10625] device hsr_slave_1 entered promiscuous mode [ 450.789267][T10625] debugfs: Directory 'hsr0' with parent '/' already present! [ 450.839426][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.846511][T10625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.854319][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.861824][T10625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.905333][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.918322][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.926808][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.935193][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.949005][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.961306][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.970186][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.977497][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.992882][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.006247][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.013430][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.032435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.041530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.051298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.064781][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.077421][T10625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.090200][T10625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.100536][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.118043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.126996][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.139930][T10625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.203551][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.218263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.230040][T10625] device veth0_vlan entered promiscuous mode [ 451.240859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.249056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.259364][T10625] device veth1_vlan entered promiscuous mode [ 451.277950][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.287503][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.298427][T10625] device veth0_macvtap entered promiscuous mode [ 451.308837][T10625] device veth1_macvtap entered promiscuous mode [ 451.324156][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.336396][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.346636][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.357863][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.368700][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.379300][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.389328][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.400117][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.410247][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 451.420961][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.433416][T10625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.441583][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.453831][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.462775][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.471630][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.482393][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.494550][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.504662][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.516138][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.526746][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.537362][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.547483][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.559082][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.569185][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 451.580507][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.591996][T10625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.601834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.611140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.818711][ T26] audit: type=1800 audit(1579916524.096:100): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17043 res=0 [ 451.943621][ T26] audit: type=1800 audit(1579916524.226:101): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17043 res=0 [ 452.023650][ T26] audit: type=1800 audit(1579916524.306:102): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17043 res=0 [ 452.093913][ T26] audit: type=1800 audit(1579916524.376:103): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17043 res=0 01:42:04 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff010) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1000, 0x0, 0x8, 0x7f, 0x7, 0x1ff, 0x5, 0x6, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0xfff, 0x8, 0x8001, 0x8, 0x7fffffff, 0x0, 0x0, 0xfcb, r4}, &(0x7f0000000140)=0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x200000, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) socket(0x11, 0x3, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) 01:42:04 executing program 5: 01:42:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000d80300001002000010020000a8020000a802000010020000400300004003000040030000400300004003000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000700098000000000000000000000000000000000000000000280054544c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000e0000002ac1414aa00000000000000000000000000000000000000000000000065727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e000000000000000000000000000000014000000ddff2800727066696c7465720000000000000000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff0200000000000000000000000020016772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000100000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x420000, 0x0) write$binfmt_aout(r2, 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) 01:42:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 01:42:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) 01:42:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) 01:42:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {0x0}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/32, 0x20}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/211, 0xd3}], 0x4}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 452.669222][ T1526] block nbd2: Receive control failed (result -107) [ 452.681599][T10641] block nbd2: shutting down sockets [ 452.702417][T10652] x_tables: duplicate underflow at hook 1 01:42:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 452.723187][T10649] block nbd2: Could not allocate knbd recv work queue. [ 452.730365][T10649] block nbd2: shutting down sockets [ 452.912242][ T26] audit: type=1804 audit(1579916525.196:104): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/138/file0" dev="sda1" ino=17051 res=1 [ 452.944268][T10652] x_tables: duplicate underflow at hook 1 [ 452.969916][T10670] x_tables: duplicate underflow at hook 1 [ 453.037670][ T26] audit: type=1800 audit(1579916525.196:105): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17051 res=0 01:42:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) rmdir(&(0x7f0000000140)='./bus/file0\x00') [ 453.225708][ T26] audit: type=1804 audit(1579916525.196:106): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/70/bus" dev="sda1" ino=17046 res=1 01:42:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 453.359293][ T8105] tipc: TX() has been purged, node left! [ 453.430401][ T26] audit: type=1804 audit(1579916525.246:107): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/70/bus" dev="sda1" ino=17046 res=1 01:42:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}], 0x1, 0x1, &(0x7f0000000f80)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x200) sendfile(r1, r2, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 453.506291][T10680] x_tables: duplicate underflow at hook 1 [ 453.520235][T10687] overlayfs: filesystem on './bus' not supported as upperdir 01:42:05 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) rmdir(&(0x7f0000000140)='./bus/file0\x00') 01:42:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 453.871492][ T26] audit: type=1804 audit(1579916526.156:108): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir541126175/syzkaller.R4KWaz/118/file0" dev="sda1" ino=16609 res=1 01:42:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 454.005128][ T26] audit: type=1800 audit(1579916526.156:109): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16609 res=0 [ 454.095757][ T1526] block nbd5: Receive control failed (result -107) [ 454.143457][ T2503] block nbd5: Attempted send on invalid socket [ 454.149864][ T2503] block nbd5: shutting down sockets [ 454.155247][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.166343][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 454.174933][ T2503] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 454.190597][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 454.198448][ T2503] Buffer I/O error on dev nbd5, logical block 2, async page read [ 454.206355][ T2503] Buffer I/O error on dev nbd5, logical block 3, async page read [ 454.215943][ T2502] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.226850][ T2502] Buffer I/O error on dev nbd5, logical block 0, async page read 01:42:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 454.235225][ T2502] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.246125][ T2502] Buffer I/O error on dev nbd5, logical block 1, async page read [ 454.255508][ T2502] blk_update_request: I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.266479][ T2502] Buffer I/O error on dev nbd5, logical block 2, async page read [ 454.274796][ T2502] blk_update_request: I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.285706][ T2502] Buffer I/O error on dev nbd5, logical block 3, async page read [ 454.295460][ T2502] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.306567][ T2502] Buffer I/O error on dev nbd5, logical block 0, async page read [ 454.318442][ T2503] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.329391][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 454.337167][ T2503] blk_update_request: I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 0 [ 454.350225][ T2502] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 454.370427][T10704] ldm_validate_partition_table(): Disk read failed. [ 454.415315][T10715] x_tables: duplicate underflow at hook 1 [ 454.459335][T10704] Dev nbd5: unable to read RDB block 0 [ 454.591645][T10704] nbd5: unable to read partition table [ 454.631482][T10718] x_tables: duplicate underflow at hook 1 01:42:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:07 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="195d3633c27d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f408", 0x18, 0x3a, 0x0, @empty, @local, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) [ 454.862823][ T1526] block nbd5: Receive control failed (result -107) [ 454.889212][T10723] block nbd5: shutting down sockets 01:42:07 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) r2 = getpid() sched_setattr(0x0, 0x0, 0x0) getpgrp(r2) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 455.198994][ T1526] block nbd4: Receive control failed (result -107) [ 455.304863][ T2502] block nbd4: Attempted send on invalid socket [ 455.311176][ T2502] block nbd4: shutting down sockets [ 455.339196][ T1526] block nbd5: Receive control failed (result -107) [ 455.401283][ T2503] block nbd5: Attempted send on invalid socket [ 455.407547][ T2503] block nbd5: shutting down sockets [ 455.449839][T10736] ldm_validate_partition_table(): Disk read failed. [ 455.462160][T10744] ldm_validate_partition_table(): Disk read failed. [ 455.545053][T10736] Dev nbd4: unable to read RDB block 0 [ 455.559777][T10744] Dev nbd5: unable to read RDB block 0 [ 455.625603][T10744] nbd5: unable to read partition table [ 455.638100][T10736] nbd4: unable to read partition table [ 455.749599][ T1526] block nbd4: Receive control failed (result -107) [ 455.758113][T10734] block nbd4: shutting down sockets [ 456.112235][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.129495][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.142574][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.169301][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.177690][ T8105] device bridge_slave_1 left promiscuous mode [ 456.199383][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.269727][ T8105] device bridge_slave_0 left promiscuous mode [ 456.276068][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.323512][ T8105] device veth1_macvtap left promiscuous mode [ 456.329602][ T8105] device veth0_macvtap left promiscuous mode [ 456.335740][ T8105] device veth1_vlan left promiscuous mode [ 456.341916][ T8105] device veth0_vlan left promiscuous mode [ 457.469586][ T8105] device hsr_slave_0 left promiscuous mode [ 457.529385][ T8105] device hsr_slave_1 left promiscuous mode [ 457.612330][ T8105] team0 (unregistering): Port device team_slave_1 removed [ 457.622688][ T8105] team0 (unregistering): Port device team_slave_0 removed [ 457.633190][ T8105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.662666][ T8105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.741887][ T8105] bond0 (unregistering): Released all slaves [ 457.855842][T10759] IPVS: ftp: loaded support on port[0] = 21 [ 457.908726][T10759] chnl_net:caif_netlink_parms(): no params data found [ 457.938641][T10759] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.946336][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.954544][T10759] device bridge_slave_0 entered promiscuous mode [ 457.961955][T10759] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.969011][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.976991][T10759] device bridge_slave_1 entered promiscuous mode [ 458.056955][T10759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.072411][T10759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.096759][T10759] team0: Port device team_slave_0 added [ 458.106865][T10759] team0: Port device team_slave_1 added [ 458.127918][T10759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.135185][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.165792][T10759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.178078][T10759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.188602][T10759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.219803][T10759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.282451][T10759] device hsr_slave_0 entered promiscuous mode [ 458.339613][T10759] device hsr_slave_1 entered promiscuous mode [ 458.399832][T10759] debugfs: Directory 'hsr0' with parent '/' already present! [ 458.453632][T10759] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.460914][T10759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.468314][T10759] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.475458][T10759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.510552][T10759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.525735][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.534660][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.542888][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.557088][T10759] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.569484][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.578191][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.585397][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.597746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.609607][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.616776][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.634934][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.647571][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.656423][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.672285][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.681227][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.691544][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.713561][T10759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.721932][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.729820][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.788729][T10759] device veth0_vlan entered promiscuous mode [ 458.796383][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.805811][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.814863][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.823132][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.837792][T10759] device veth1_vlan entered promiscuous mode [ 458.856380][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.865378][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.873966][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.885163][T10759] device veth0_macvtap entered promiscuous mode [ 458.895360][T10759] device veth1_macvtap entered promiscuous mode [ 458.910557][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 458.921758][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.932186][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 458.942784][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.956729][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 458.970434][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.980976][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 458.991787][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.002208][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.014007][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.025757][T10759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.034703][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.044964][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.056598][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.067406][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.077645][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.089619][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.099824][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.110795][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.121123][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.131625][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.141783][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.152843][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.164348][T10759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.172639][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.181960][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.406690][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 459.406709][ T26] audit: type=1800 audit(1579916531.686:111): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16929 res=0 [ 459.538090][ T26] audit: type=1800 audit(1579916531.816:112): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16929 res=0 [ 459.616442][ T26] audit: type=1800 audit(1579916531.896:113): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16929 res=0 [ 459.648219][ T26] audit: type=1800 audit(1579916531.926:114): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16929 res=0 01:42:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:12 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00894e", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:42:12 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) r2 = getpid() sched_setattr(0x0, 0x0, 0x0) getpgrp(r2) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) r2 = getpid() sched_setattr(0x0, 0x0, 0x0) getpgrp(r2) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 460.238216][ T1526] block nbd0: Receive control failed (result -107) [ 460.275051][ T1526] block nbd4: Receive control failed (result -107) [ 460.346659][ T2502] block nbd4: Attempted send on invalid socket [ 460.349659][ T2503] block nbd0: Attempted send on invalid socket [ 460.352964][ T2502] block nbd4: shutting down sockets [ 460.359071][ T2503] block nbd0: shutting down sockets [ 460.365046][ T2502] print_req_error: 177 callbacks suppressed [ 460.365142][ T2502] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.370661][ T2503] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.376220][ T2502] buffer_io_error: 182 callbacks suppressed [ 460.376231][ T2502] Buffer I/O error on dev nbd4, logical block 0, async page read [ 460.388175][ T2503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 460.428464][ T2503] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 460.439331][ T2503] Buffer I/O error on dev nbd0, logical block 1, async page read [ 460.445884][ T2502] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.447061][ T2503] Buffer I/O error on dev nbd0, logical block 2, async page read [ 460.447076][ T2503] Buffer I/O error on dev nbd0, logical block 3, async page read [ 460.479700][ T2502] Buffer I/O error on dev nbd4, logical block 1, async page read [ 460.487693][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 460.498756][ T2502] Buffer I/O error on dev nbd0, logical block 0, async page read [ 460.506910][ T2502] Buffer I/O error on dev nbd0, logical block 1, async page read [ 460.515046][ T2502] Buffer I/O error on dev nbd0, logical block 2, async page read [ 460.522859][ T2502] Buffer I/O error on dev nbd0, logical block 3, async page read [ 460.532772][ T1526] block nbd2: Receive control failed (result -107) [ 460.534899][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.552138][ T2502] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 460.565528][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.574407][ T2503] blk_update_request: I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 460.576780][ T2502] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 01:42:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 460.635866][T10782] ldm_validate_partition_table(): Disk read failed. [ 460.643424][T10779] block nbd2: shutting down sockets [ 460.652340][T10781] ldm_validate_partition_table(): Disk read failed. 01:42:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 460.695640][T10782] Dev nbd4: unable to read RDB block 0 [ 460.703017][T10781] Dev nbd0: unable to read RDB block 0 [ 460.730795][T10781] nbd0: unable to read partition table 01:42:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 460.751580][T10782] nbd4: unable to read partition table [ 460.846295][ T1526] block nbd5: Receive control failed (result -107) [ 460.859264][ T21] tipc: TX() has been purged, node left! 01:42:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) r2 = getpid() sched_setattr(0x0, 0x0, 0x0) getpgrp(r2) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 460.924960][ T2503] block nbd5: Attempted send on invalid socket [ 460.931352][ T2503] block nbd5: shutting down sockets [ 460.963268][T10795] ldm_validate_partition_table(): Disk read failed. [ 460.992441][T10795] Dev nbd5: unable to read RDB block 0 [ 461.016352][T10795] nbd5: unable to read partition table 01:42:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000d80300001002000010020000a8020000a802000010020000400300004003000040030000400300004003000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000700098000000000000000000000000000000000000000000280054544c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000e0000002ac1414aa00000000000000000000000000000000000000000000000065727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e000000000000000000000000000000014000000ddff2800727066696c7465720000000000000000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff0200000000000000000000000020016772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000100000000000000000000000000000000280045434e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4}, "", [[], [], [], [], []]}, 0x520) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) 01:42:13 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0)}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 461.218826][ T1526] block nbd2: Receive control failed (result -107) 01:42:13 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) close(r0) [ 461.340757][ T2503] block nbd2: Attempted send on invalid socket [ 461.346990][ T2503] block nbd2: shutting down sockets [ 461.368842][T10814] x_tables: duplicate underflow at hook 1 [ 461.376849][T10806] ldm_validate_partition_table(): Disk read failed. [ 461.389401][ T26] audit: type=1804 audit(1579916533.666:115): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/76/file0" dev="sda1" ino=16786 res=1 [ 461.439057][T10806] Dev nbd2: unable to read RDB block 0 [ 461.526439][ T26] audit: type=1800 audit(1579916533.676:116): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16786 res=0 [ 461.541005][T10806] nbd2: unable to read partition table 01:42:14 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000f80)) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:14 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) close(r0) [ 461.954078][T10817] x_tables: duplicate underflow at hook 1 [ 462.139932][ T26] audit: type=1804 audit(1579916534.426:117): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir606087649/syzkaller.cGqEHZ/149/file0" dev="sda1" ino=16977 res=1 01:42:14 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0)}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:14 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'\x00', 0x1000}) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff010) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1000, 0x0, 0x8, 0x7f, 0x7, 0x1ff, 0x5, 0x6}, &(0x7f00000000c0)=0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff010) 01:42:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 462.489311][ T26] audit: type=1804 audit(1579916534.766:118): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/77/file0" dev="sda1" ino=16881 res=1 [ 462.678029][ T26] audit: type=1800 audit(1579916534.766:119): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16881 res=0 [ 462.806903][ T26] audit: type=1804 audit(1579916535.086:120): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/145/bus" dev="sda1" ino=17066 res=1 [ 463.262707][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.271597][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.285258][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.293261][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.305681][ T21] device bridge_slave_1 left promiscuous mode [ 463.314495][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.359924][ T21] device bridge_slave_0 left promiscuous mode [ 463.366340][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.415281][ T21] device veth1_macvtap left promiscuous mode [ 463.422695][ T21] device veth0_macvtap left promiscuous mode [ 463.428997][ T21] device veth1_vlan left promiscuous mode [ 463.434832][ T21] device veth0_vlan left promiscuous mode [ 464.589559][ T21] device hsr_slave_0 left promiscuous mode [ 464.639266][ T21] device hsr_slave_1 left promiscuous mode [ 464.711396][ T21] team0 (unregistering): Port device team_slave_1 removed [ 464.722347][ T21] team0 (unregistering): Port device team_slave_0 removed [ 464.732657][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.782942][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.882000][ T21] bond0 (unregistering): Released all slaves [ 465.006536][T10868] IPVS: ftp: loaded support on port[0] = 21 [ 465.060752][T10868] chnl_net:caif_netlink_parms(): no params data found [ 465.093318][T10868] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.100496][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.108361][T10868] device bridge_slave_0 entered promiscuous mode [ 465.116138][T10868] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.123564][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.131567][T10868] device bridge_slave_1 entered promiscuous mode [ 465.150686][T10868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.161937][T10868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.182929][T10868] team0: Port device team_slave_0 added [ 465.190210][T10868] team0: Port device team_slave_1 added [ 465.205779][T10868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.212841][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.238963][T10868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.299882][T10868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.307077][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.336992][T10868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.414395][T10868] device hsr_slave_0 entered promiscuous mode [ 465.489613][T10868] device hsr_slave_1 entered promiscuous mode [ 465.579256][T10868] debugfs: Directory 'hsr0' with parent '/' already present! [ 465.627569][T10868] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.634704][T10868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.642358][T10868] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.649677][T10868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.700594][T10868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.714052][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.722821][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.731462][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.751110][T10868] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.772613][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.781638][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.789411][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.810543][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.819134][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.826294][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.839836][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.848995][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.861797][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.880911][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.890213][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.899661][T10868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.917663][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.925814][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.939857][T10868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.011301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.020939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.031089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.040236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.048675][T10868] device veth0_vlan entered promiscuous mode [ 466.061041][T10868] device veth1_vlan entered promiscuous mode [ 466.080724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.090576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.101604][T10868] device veth0_macvtap entered promiscuous mode [ 466.112365][T10868] device veth1_macvtap entered promiscuous mode [ 466.126388][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 466.137048][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.147380][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 466.158153][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.168435][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 466.179006][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.189690][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 466.200437][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.210428][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 466.221277][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.232885][T10868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.241650][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.251457][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.260456][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.269556][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.279823][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 466.291404][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.301875][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 466.312526][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.322397][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 466.333194][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.343277][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 466.353850][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.363814][T10868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 466.375265][T10868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.386684][T10868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.394693][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.403788][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.604941][ T26] audit: type=1800 audit(1579916538.886:121): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17074 res=0 [ 466.735444][ T26] audit: type=1800 audit(1579916539.016:122): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17074 res=0 [ 466.818920][ T26] audit: type=1800 audit(1579916539.096:123): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17074 res=0 [ 466.890240][ T26] audit: type=1800 audit(1579916539.176:124): pid=10881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17074 res=0 01:42:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4}, "", [[], [], [], [], []]}, 0x520) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) 01:42:19 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'\x00', 0x1000}) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff010) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1000, 0x0, 0x8, 0x7f, 0x7, 0x1ff, 0x5, 0x6}, &(0x7f00000000c0)=0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff010) 01:42:19 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r3, r4, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 467.402374][T10892] x_tables: duplicate underflow at hook 1 [ 467.438457][ T26] audit: type=1804 audit(1579916539.716:125): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/78/file0" dev="sda1" ino=17085 res=1 01:42:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') getdents(r4, &(0x7f00000000c0)=""/87, 0x222) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r7, 0x800000000000937e, &(0x7f00000001c0)="010000000000000018040000075a940003000000008001832f") fcntl$setstatus(r6, 0x4, 0x6100) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x420900, 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 467.667701][ T26] audit: type=1800 audit(1579916539.716:126): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17085 res=0 01:42:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') getdents(r3, &(0x7f00000000c0)=""/87, 0x222) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r5, 0x800000000000937e, &(0x7f00000001c0)="010000000000000018040000075a940003000000008001832f") setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x420900, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 01:42:20 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:20 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 468.149207][ T8105] tipc: TX() has been purged, node left! 01:42:20 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) creat(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 01:42:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000003000), 0xffffff92) umount2(&(0x7f0000000180)='./file0\x00', 0x9) 01:42:20 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:21 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:21 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/32, 0x20}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/211, 0xd3}], 0x4}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:21 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 469.264863][ T26] audit: type=1804 audit(1579916541.546:127): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/149/file0" dev="sda1" ino=17085 res=1 [ 469.410674][ T26] audit: type=1800 audit(1579916541.546:128): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17085 res=0 01:42:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:22 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) open(&(0x7f00000001c0)='./bus/file0\x00', 0x0, 0x0) [ 469.784826][ T1526] block nbd2: Receive control failed (result -107) [ 469.808681][ T2503] block nbd2: Attempted send on invalid socket [ 469.814950][ T2503] block nbd2: shutting down sockets [ 469.820419][ T2503] print_req_error: 237 callbacks suppressed [ 469.820459][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.842803][ T2503] buffer_io_error: 246 callbacks suppressed [ 469.842816][ T2503] Buffer I/O error on dev nbd2, logical block 0, async page read [ 469.859581][ T2503] Buffer I/O error on dev nbd2, logical block 1, async page read [ 469.867357][ T2503] Buffer I/O error on dev nbd2, logical block 2, async page read [ 469.875273][ T2503] Buffer I/O error on dev nbd2, logical block 3, async page read [ 469.884233][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.895080][ T2503] Buffer I/O error on dev nbd2, logical block 0, async page read [ 469.902967][ T2503] Buffer I/O error on dev nbd2, logical block 1, async page read [ 469.910836][ T2503] Buffer I/O error on dev nbd2, logical block 2, async page read [ 469.919344][ T2503] Buffer I/O error on dev nbd2, logical block 3, async page read [ 469.927925][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.938817][ T2503] Buffer I/O error on dev nbd2, logical block 0, async page read [ 469.947243][ T2503] Buffer I/O error on dev nbd2, logical block 1, async page read [ 469.960267][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.972394][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.984404][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 469.996797][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 470.008921][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 470.019953][T10983] ldm_validate_partition_table(): Disk read failed. [ 470.027781][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 470.040341][ T2503] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 470.054084][T10983] Dev nbd2: unable to read RDB block 0 [ 470.064177][T10983] nbd2: unable to read partition table [ 470.221327][T10988] overlayfs: filesystem on './bus' not supported as upperdir [ 470.470926][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.482620][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.507711][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.523155][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.538936][ T8105] device bridge_slave_1 left promiscuous mode [ 470.546993][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.585014][ T8105] device bridge_slave_0 left promiscuous mode [ 470.602386][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.643296][ T8105] device veth1_macvtap left promiscuous mode [ 470.649424][ T8105] device veth0_macvtap left promiscuous mode [ 470.655453][ T8105] device veth1_vlan left promiscuous mode [ 470.661642][ T8105] device veth0_vlan left promiscuous mode [ 471.779551][ T8105] device hsr_slave_0 left promiscuous mode [ 471.810301][ T0] NOHZ: local_softirq_pending 08 [ 471.829240][ T8105] device hsr_slave_1 left promiscuous mode [ 471.901914][ T8105] team0 (unregistering): Port device team_slave_1 removed [ 471.912525][ T8105] team0 (unregistering): Port device team_slave_0 removed [ 471.923819][ T8105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.953329][ T8105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.031629][ T8105] bond0 (unregistering): Released all slaves [ 472.125874][T11000] IPVS: ftp: loaded support on port[0] = 21 [ 472.192335][T11000] chnl_net:caif_netlink_parms(): no params data found [ 472.223426][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.230719][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.238417][T11000] device bridge_slave_0 entered promiscuous mode [ 472.289320][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.296587][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.305185][T11000] device bridge_slave_1 entered promiscuous mode [ 472.331421][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.345318][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.371741][T11000] team0: Port device team_slave_0 added [ 472.378735][T11000] team0: Port device team_slave_1 added [ 472.404469][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.411611][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.441924][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.455371][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.467315][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.497414][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.574948][T11000] device hsr_slave_0 entered promiscuous mode [ 472.619635][T11000] device hsr_slave_1 entered promiscuous mode [ 472.679238][T11000] debugfs: Directory 'hsr0' with parent '/' already present! [ 472.718907][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.726048][T11000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.733659][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.740864][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.775852][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.788836][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.797827][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.807125][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.823793][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.837331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.846191][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.853638][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.872287][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.880942][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.887958][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.897362][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.907150][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.918706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.936754][T11000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.948892][T11000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.961547][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.970793][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.979726][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.998465][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.007724][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.015796][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.069626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.085098][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.094384][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.102907][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.113394][T11000] device veth0_vlan entered promiscuous mode [ 473.126054][T11000] device veth1_vlan entered promiscuous mode [ 473.134073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.154232][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.163314][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.174512][T11000] device veth0_macvtap entered promiscuous mode [ 473.184036][T11000] device veth1_macvtap entered promiscuous mode [ 473.198565][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.209231][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.221087][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.231782][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.241952][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.252814][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.263563][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.275494][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.285785][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 473.296442][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.307795][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.316375][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.325375][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.333721][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.342933][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.353541][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 473.365363][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.375660][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 473.386675][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.397130][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 473.407802][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.417956][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 473.428498][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.438835][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 473.450881][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.462107][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.471202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.480957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.668210][ T26] audit: type=1800 audit(1579916545.946:129): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16625 res=0 [ 473.797210][ T26] audit: type=1800 audit(1579916546.076:130): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16625 res=0 [ 473.885573][ T26] audit: type=1800 audit(1579916546.166:131): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16625 res=0 01:42:26 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff010) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$nl80211(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff010) 01:42:26 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 474.467484][ T1526] block nbd2: Receive control failed (result -107) [ 474.478575][ T1526] block nbd0: Receive control failed (result -107) [ 474.494911][ T2502] block nbd2: Attempted send on invalid socket [ 474.501189][ T2502] block nbd2: shutting down sockets [ 474.507793][T11022] ldm_validate_partition_table(): Disk read failed. [ 474.515495][T11022] Dev nbd2: unable to read RDB block 0 [ 474.520138][ T2503] block nbd0: Attempted send on invalid socket [ 474.521764][T11022] nbd2: unable to read partition table [ 474.527343][ T2503] block nbd0: shutting down sockets [ 474.545673][T11021] ldm_validate_partition_table(): Disk read failed. [ 474.557358][T11021] Dev nbd0: unable to read RDB block 0 [ 474.567602][T11021] nbd0: unable to read partition table 01:42:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 474.605142][ T26] audit: type=1804 audit(1579916546.886:132): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/150/bus" dev="sda1" ino=16801 res=1 01:42:27 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x32540f0, &(0x7f0000000180)={[{@commit={'commit', 0x3d, 0x6}}]}) [ 474.757635][ T26] audit: type=1804 audit(1579916546.926:133): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/150/bus" dev="sda1" ino=16801 res=1 01:42:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 474.808814][ T26] audit: type=1804 audit(1579916546.926:134): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/150/bus" dev="sda1" ino=16801 res=1 [ 474.865905][ T1526] block nbd0: Receive control failed (result -107) [ 474.888854][ T26] audit: type=1804 audit(1579916546.926:135): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/150/bus" dev="sda1" ino=16801 res=1 01:42:27 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="cefaad1bb83c000007dc", 0xa}], 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000006c0)='./file0\x00', 0x0) [ 474.913152][ T2502] block nbd0: Attempted send on invalid socket [ 474.913168][ T2502] block nbd0: shutting down sockets [ 474.913213][ T2502] print_req_error: 38 callbacks suppressed [ 474.913264][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 474.946488][ T2502] buffer_io_error: 182 callbacks suppressed [ 474.946499][ T2502] Buffer I/O error on dev nbd0, logical block 0, async page read [ 474.961768][ T2502] Buffer I/O error on dev nbd0, logical block 1, async page read [ 474.969994][ T2502] Buffer I/O error on dev nbd0, logical block 2, async page read [ 474.978000][ T2502] Buffer I/O error on dev nbd0, logical block 3, async page read [ 474.985991][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 474.997036][ T2502] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.005085][ T2502] Buffer I/O error on dev nbd0, logical block 1, async page read 01:42:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 475.013238][ T2502] Buffer I/O error on dev nbd0, logical block 2, async page read [ 475.021406][ T2502] Buffer I/O error on dev nbd0, logical block 3, async page read [ 475.039581][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.051802][ T2502] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.059622][ T2502] Buffer I/O error on dev nbd0, logical block 1, async page read [ 475.067764][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.079396][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.090746][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.102191][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.114112][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.125387][T11038] ldm_validate_partition_table(): Disk read failed. [ 475.132902][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.144010][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 475.155588][T11038] Dev nbd0: unable to read RDB block 0 [ 475.161807][T11038] nbd0: unable to read partition table [ 475.254136][T11050] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 475.274732][T11046] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000006, 01:42:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:27 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:27 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000540)={'\x00', 0x1000}) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff010) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x7f, 0x7, 0x1ff, 0x5, 0x6}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0xfff, 0x8, 0x8001, 0x8, 0x7fffffff, 0x0, 0x0, 0xfcb}, &(0x7f0000000140)=0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x200000, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) socket(0x11, 0x3, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280)="a9", 0x1) 01:42:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 475.474196][ T21] tipc: TX() has been purged, node left! [ 475.509258][T11057] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000006, 01:42:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x101000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)="a2e6fa9a", 0x31c) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:42:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_procfs(0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') getdents(r4, &(0x7f00000000c0)=""/87, 0x222) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r7, 0x800000000000937e, &(0x7f00000001c0)="010000000000000018040000075a940003000000008001832f") fcntl$setstatus(r6, 0x4, 0x6100) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x420900, 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 475.923890][ T26] audit: type=1804 audit(1579916548.206:136): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir322409923/syzkaller.8NVy7X/83/bus" dev="sda1" ino=16849 res=1 01:42:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_script(r1, &(0x7f0000000800)={'#! ', './file0', [], 0xa, "7c19b27de9a5b33ae28aa15a86381f4f45591c45a14ef2242775503caab26711dcf9a0286df5d285f9d7f53bf4ab437db70579879bb0b9d3845a77bb8c1d591eb8f6309799f40af73f5462fced31aeb55d0a69a8c3f832a61833ae8c19e866be15ddb25a25281688c88bbb35c45283df8fcaa9507e9775e5286082f1211db75b92c8458b2751b9cea20c0eb1644adfaae3e33205396196bd4f1af825c5dbfb1d6df81b7bffb7110300c6d4ed7e6f513a1ffac46dfa66468e0243d2851f69acdb960614dd4ada0df34b24760290b8294635dc47718e5ba1a8c2d2a8375d"}, 0xe8) recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000780)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0) 01:42:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x420000, 0x0) write$binfmt_aout(r2, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4, 0x347, 0x3}, "", [[], [], [], [], [], [], []]}, 0x720) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) 01:42:28 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/32, 0x20}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/211, 0xd3}], 0x4}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:28 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 476.538755][T11108] x_tables: duplicate underflow at hook 1 [ 476.578135][ T26] audit: type=1804 audit(1579916548.856:137): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/153/file0" dev="sda1" ino=16529 res=1 01:42:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40001, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x3f3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) setresgid(0x0, 0x0, 0x0) [ 476.869041][ T26] audit: type=1800 audit(1579916548.856:138): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16529 res=0 [ 477.349875][T11108] x_tables: duplicate underflow at hook 1 [ 477.762221][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.779285][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.787743][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.808839][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.818873][ T21] device bridge_slave_1 left promiscuous mode [ 477.825429][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.889926][ T21] device bridge_slave_0 left promiscuous mode [ 477.896337][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.963148][ T21] device veth1_macvtap left promiscuous mode [ 477.969431][ T21] device veth0_macvtap left promiscuous mode [ 477.975965][ T21] device veth1_vlan left promiscuous mode [ 477.982120][ T21] device veth0_vlan left promiscuous mode [ 479.179600][ T21] device hsr_slave_0 left promiscuous mode [ 479.229396][ T21] device hsr_slave_1 left promiscuous mode [ 479.282775][ T21] team0 (unregistering): Port device team_slave_1 removed [ 479.294133][ T21] team0 (unregistering): Port device team_slave_0 removed [ 479.304587][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.362720][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.422959][ T21] bond0 (unregistering): Released all slaves [ 479.526475][T11137] IPVS: ftp: loaded support on port[0] = 21 [ 479.581689][T11137] chnl_net:caif_netlink_parms(): no params data found [ 479.659398][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.666707][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.678258][T11137] device bridge_slave_0 entered promiscuous mode [ 479.686883][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.697418][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.706393][T11137] device bridge_slave_1 entered promiscuous mode [ 479.735588][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.747044][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.773986][T11137] team0: Port device team_slave_0 added [ 479.781996][T11137] team0: Port device team_slave_1 added [ 479.802174][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.812618][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.844529][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.857001][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.867936][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.897843][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.974448][T11137] device hsr_slave_0 entered promiscuous mode [ 480.079630][T11137] device hsr_slave_1 entered promiscuous mode [ 480.119240][T11137] debugfs: Directory 'hsr0' with parent '/' already present! [ 480.169044][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.176267][T11137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.183790][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.191218][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.235870][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.249919][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.259161][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.267828][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.286887][T11137] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.300934][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.309762][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.316989][ T8107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.339531][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.347943][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.355335][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.394209][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.403436][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.413307][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.426357][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.440770][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.453091][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.467756][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.475635][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.489576][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.547898][T11137] device veth0_vlan entered promiscuous mode [ 480.555962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.565074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.574292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.583203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.592299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.600718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.617134][T11137] device veth1_vlan entered promiscuous mode [ 480.633912][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.642528][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.651241][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.660002][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.670997][T11137] device veth0_macvtap entered promiscuous mode [ 480.680998][T11137] device veth1_macvtap entered promiscuous mode [ 480.695017][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.705680][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.720348][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.731593][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.741756][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.752647][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.763524][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.774577][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.784764][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 480.795647][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.807513][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.815923][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.824610][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.833056][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.842177][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.853247][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.864396][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.875017][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.886422][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.896985][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.908892][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.919156][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.930220][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.940299][T11137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 480.951007][T11137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.962666][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.971356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.981326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.182704][ T26] audit: type=1800 audit(1579916553.466:139): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17109 res=0 [ 481.306380][ T26] audit: type=1800 audit(1579916553.586:140): pid=11151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17109 res=0 [ 481.391772][ T26] audit: type=1800 audit(1579916553.676:141): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17109 res=0 [ 481.418440][ T26] audit: type=1800 audit(1579916553.696:142): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17109 res=0 01:42:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40001, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x3f3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) setresgid(0x0, 0x0, 0x0) 01:42:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, 0x0, 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:34 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/158, 0x9e}], 0x6, &(0x7f0000000640)=""/249, 0xf9}, 0x40}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/32, 0x20}, 0x1}, {{&(0x7f0000000740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/215, 0xd7}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1f}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/211, 0xd3}], 0x4}, 0x9}], 0x4, 0x1, &(0x7f0000000f80)) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x200) sendfile(r4, r5, 0x0, 0x12400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:34 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x420000, 0x0) write$binfmt_aout(r2, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4, 0x347, 0x3}, "", [[], [], [], [], [], [], []]}, 0x720) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) [ 482.027222][T11164] x_tables: duplicate underflow at hook 1 01:42:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, 0x0, 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 482.073048][ T26] audit: type=1804 audit(1579916554.356:143): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir048542121/syzkaller.FuZIj1/154/file0" dev="sda1" ino=17120 res=1 01:42:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x420000, 0x0) write$binfmt_aout(r2, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4, 0x347, 0x3}, "", [[], [], [], [], [], [], []]}, 0x720) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) [ 482.199137][ T26] audit: type=1800 audit(1579916554.356:144): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17120 res=0 01:42:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 482.359198][ T42] tipc: TX() has been purged, node left! 01:42:34 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 482.402861][T11172] x_tables: duplicate underflow at hook 1 01:42:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, 0x0, 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:35 executing program 5: r0 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}, {}], 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/28) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x7, 0x0]) 01:42:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:35 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) r4 = getpid() r5 = getpid() rt_tgsigqueueinfo(r4, r5, 0x13, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 01:42:35 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:35 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a80)={{0x107, 0x1, 0x7, 0x2f3, 0x193, 0x4, 0x0, 0x3}, "", [[], [], [], [], []]}, 0x520) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x2}, 0xf) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) 01:42:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 483.606301][ T1526] block nbd5: Receive control failed (result -107) [ 483.642902][T11215] x_tables: duplicate underflow at hook 1 [ 483.645155][ T2503] block nbd5: Attempted send on invalid socket [ 483.655221][ T2503] block nbd5: shutting down sockets [ 483.661048][ T2503] print_req_error: 6 callbacks suppressed [ 483.661069][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.677759][ T2503] buffer_io_error: 54 callbacks suppressed [ 483.677779][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 483.691521][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 483.699460][ T2503] Buffer I/O error on dev nbd5, logical block 2, async page read [ 483.707191][ T2503] Buffer I/O error on dev nbd5, logical block 3, async page read [ 483.719065][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.730031][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 483.737765][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 483.745756][ T2503] Buffer I/O error on dev nbd5, logical block 2, async page read [ 483.753544][ T2503] Buffer I/O error on dev nbd5, logical block 3, async page read [ 483.762379][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.773400][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 483.782498][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 483.791678][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.803709][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.815865][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.827786][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.840415][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.851642][T11212] ldm_validate_partition_table(): Disk read failed. [ 483.859677][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.871768][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 483.884744][T11212] Dev nbd5: unable to read RDB block 0 [ 483.896303][T11212] nbd5: unable to read partition table [ 483.941727][ T1526] block nbd5: Receive control failed (result -107) [ 483.964904][ T2503] block nbd5: Attempted send on invalid socket [ 483.971307][ T2503] block nbd5: shutting down sockets [ 483.984175][T11212] ldm_validate_partition_table(): Disk read failed. [ 483.996487][T11212] Dev nbd5: unable to read RDB block 0 [ 484.006526][T11212] nbd5: unable to read partition table [ 484.055447][T11215] x_tables: duplicate underflow at hook 1 01:42:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:36 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 484.456346][ T1526] block nbd5: Receive control failed (result -107) 01:42:36 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 484.519175][ T2502] block nbd5: Attempted send on invalid socket [ 484.525776][ T2502] block nbd5: shutting down sockets [ 484.537322][T11236] ldm_validate_partition_table(): Disk read failed. [ 484.549004][T11236] Dev nbd5: unable to read RDB block 0 [ 484.558612][T11236] nbd5: unable to read partition table [ 484.946370][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.974644][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.017050][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.035358][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.059691][ T1526] block nbd0: Receive control failed (result -107) [ 485.120469][ T2502] block nbd0: Attempted send on invalid socket [ 485.126749][ T2502] block nbd0: shutting down sockets [ 485.139588][T11252] ldm_validate_partition_table(): Disk read failed. [ 485.150280][T11252] Dev nbd0: unable to read RDB block 0 [ 485.163467][T11252] nbd0: unable to read partition table [ 485.173752][ T42] device bridge_slave_1 left promiscuous mode [ 485.205941][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.350090][ T42] device bridge_slave_0 left promiscuous mode [ 485.356535][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.447312][ T42] device veth1_macvtap left promiscuous mode [ 485.455679][ T42] device veth0_macvtap left promiscuous mode [ 485.461958][ T42] device veth1_vlan left promiscuous mode [ 485.468072][ T42] device veth0_vlan left promiscuous mode [ 486.609721][ T42] device hsr_slave_0 left promiscuous mode [ 486.649286][ T42] device hsr_slave_1 left promiscuous mode [ 486.701648][ T42] team0 (unregistering): Port device team_slave_1 removed [ 486.714139][ T42] team0 (unregistering): Port device team_slave_0 removed [ 486.725117][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.782310][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.872852][ T42] bond0 (unregistering): Released all slaves [ 486.975525][T11259] IPVS: ftp: loaded support on port[0] = 21 [ 487.029864][T11259] chnl_net:caif_netlink_parms(): no params data found [ 487.060206][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.067381][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.075403][T11259] device bridge_slave_0 entered promiscuous mode [ 487.083512][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.091543][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.099928][T11259] device bridge_slave_1 entered promiscuous mode [ 487.151338][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.162839][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.187945][T11259] team0: Port device team_slave_0 added [ 487.195739][T11259] team0: Port device team_slave_1 added [ 487.217104][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.226642][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.257240][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.269872][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.277030][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.304394][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.371756][T11259] device hsr_slave_0 entered promiscuous mode [ 487.442569][T11259] device hsr_slave_1 entered promiscuous mode [ 487.502721][T11259] debugfs: Directory 'hsr0' with parent '/' already present! [ 487.548915][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.556071][T11259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.563635][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.570884][T11259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.606048][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.619760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.628815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.637506][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.661230][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.675462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.684792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.692172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.711802][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.720704][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.729233][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.739378][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.748812][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.763480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.772416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.784880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.796303][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.813359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.822156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.835937][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.900299][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.909916][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.920430][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 487.928190][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 487.937785][T11259] device veth0_vlan entered promiscuous mode [ 487.950325][T11259] device veth1_vlan entered promiscuous mode [ 487.968547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 487.977428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 487.986004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.997855][T11259] device veth0_macvtap entered promiscuous mode [ 488.008036][T11259] device veth1_macvtap entered promiscuous mode [ 488.023648][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.034478][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.045042][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.056049][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.066526][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.077093][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.087474][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.098322][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.108333][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.118807][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.131170][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.139407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.148508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.159079][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.170328][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.180376][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.191135][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.201601][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.213025][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.223598][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.234376][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.244416][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 488.254958][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.266350][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.274882][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.284176][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.499495][ T26] audit: type=1800 audit(1579916560.786:145): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17135 res=0 [ 488.603796][ T26] audit: type=1800 audit(1579916560.886:146): pid=11273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17135 res=0 [ 488.681141][ T26] audit: type=1800 audit(1579916560.966:147): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17135 res=0 [ 488.733760][ T26] audit: type=1800 audit(1579916561.016:148): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17135 res=0 01:42:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:41 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 01:42:41 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:41 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x2042, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0], 0x14) 01:42:41 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 489.357504][ T1526] block nbd5: Receive control failed (result -107) [ 489.380559][ T1526] block nbd0: Receive control failed (result -107) [ 489.404274][ T2503] block nbd5: Attempted send on invalid socket [ 489.410532][ T2503] block nbd5: shutting down sockets [ 489.416962][ T2503] print_req_error: 54 callbacks suppressed [ 489.416983][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.435528][ T2503] buffer_io_error: 246 callbacks suppressed [ 489.435539][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 489.449496][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 489.455127][ T2502] block nbd0: Attempted send on invalid socket [ 489.457258][ T2503] Buffer I/O error on dev nbd5, logical block 2, async page read [ 489.457279][ T2503] Buffer I/O error on dev nbd5, logical block 3, async page read [ 489.463479][ T2502] block nbd0: shutting down sockets [ 489.463507][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.463524][ T2502] Buffer I/O error on dev nbd0, logical block 0, async page read [ 489.463539][ T2502] Buffer I/O error on dev nbd0, logical block 1, async page read [ 489.463552][ T2502] Buffer I/O error on dev nbd0, logical block 2, async page read [ 489.463626][ T2502] Buffer I/O error on dev nbd0, logical block 3, async page read [ 489.473586][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.481719][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.485401][ T2503] Buffer I/O error on dev nbd5, logical block 0, async page read [ 489.485416][ T2503] Buffer I/O error on dev nbd5, logical block 1, async page read [ 489.486405][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.498009][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.509352][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.513283][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.521424][ T2503] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.528754][ T2502] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 489.542194][T11285] ldm_validate_partition_table(): Disk read failed. [ 489.552828][T11282] ldm_validate_partition_table(): Disk read failed. [ 489.562479][T11285] Dev nbd5: unable to read RDB block 0 [ 489.568750][T11282] Dev nbd0: unable to read RDB block 0 [ 489.583436][T11285] nbd5: unable to read partition table [ 489.591885][T11282] nbd0: unable to read partition table 01:42:42 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 489.703201][T11289] overlayfs: failed to resolve './file0': -2 [ 489.709549][T11283] attempt to access beyond end of device [ 489.753666][T11283] loop3: rw=2049, want=78, limit=63 01:42:42 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 489.917345][T11291] block nbd5: Receive control failed (result -107) [ 489.950922][ T2503] block nbd5: Attempted send on invalid socket [ 489.957248][ T2503] block nbd5: shutting down sockets [ 489.968953][T11297] ldm_validate_partition_table(): Disk read failed. [ 489.980629][T11297] Dev nbd5: unable to read RDB block 0 [ 489.990188][T11297] nbd5: unable to read partition table 01:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 490.150532][T11284] overlayfs: './bus' not a directory 01:42:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 490.277337][T11291] block nbd0: Receive control failed (result -107) [ 490.286557][T11307] attempt to access beyond end of device [ 490.301568][T11307] loop3: rw=2049, want=78, limit=63 [ 490.346772][ T2502] block nbd0: Attempted send on invalid socket [ 490.353152][ T2502] block nbd0: shutting down sockets [ 490.368587][T11309] ldm_validate_partition_table(): Disk read failed. [ 490.383931][T11309] Dev nbd0: unable to read RDB block 0 01:42:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(0x0, 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) [ 490.394526][T11309] nbd0: unable to read partition table [ 490.439177][ T42] tipc: TX() has been purged, node left! 01:42:42 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) 01:42:43 executing program 4: mlockall(0x5) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:43 executing program 5: mlockall(0x1) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 490.980348][T11291] block nbd0: Receive control failed (result -107) [ 490.996763][T11332] block nbd0: shutting down sockets 01:42:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:43 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 491.448105][T11291] block nbd0: Receive control failed (result -107) [ 491.459359][T11347] block nbd0: shutting down sockets [ 491.578882][ T26] audit: type=1804 audit(1579916563.856:149): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir667194555/syzkaller.yvDw6c/124/file0/file0" dev="loop3" ino=49 res=1 01:42:43 executing program 4: mlockall(0x5) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 492.021977][T11369] attempt to access beyond end of device [ 492.034472][T11369] loop3: rw=2049, want=78, limit=63 [ 492.051659][ T26] audit: type=1804 audit(1579916564.336:150): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir667194555/syzkaller.yvDw6c/125/file0/file0" dev="loop3" ino=51 res=1 [ 492.592315][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.615051][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.633184][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.668190][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.684170][ T42] device bridge_slave_1 left promiscuous mode [ 492.698183][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.759856][ T42] device bridge_slave_0 left promiscuous mode [ 492.766283][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.843505][ T42] device veth1_macvtap left promiscuous mode [ 492.858411][ T42] device veth0_macvtap left promiscuous mode [ 492.874282][ T42] device veth1_vlan left promiscuous mode [ 492.881125][ T42] device veth0_vlan left promiscuous mode [ 494.009498][ T42] device hsr_slave_0 left promiscuous mode [ 494.079324][ T42] device hsr_slave_1 left promiscuous mode [ 494.152108][ T42] team0 (unregistering): Port device team_slave_1 removed [ 494.163376][ T42] team0 (unregistering): Port device team_slave_0 removed [ 494.174754][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.212904][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.293457][ T42] bond0 (unregistering): Released all slaves [ 494.406697][T11386] IPVS: ftp: loaded support on port[0] = 21 [ 494.474218][T11386] chnl_net:caif_netlink_parms(): no params data found [ 494.503349][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.510769][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.519434][T11386] device bridge_slave_0 entered promiscuous mode [ 494.527388][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.534813][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.542786][T11386] device bridge_slave_1 entered promiscuous mode [ 494.604451][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.623369][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.649391][T11386] team0: Port device team_slave_0 added [ 494.656794][T11386] team0: Port device team_slave_1 added [ 494.678075][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.689038][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.718677][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.735232][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.742545][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.772549][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.881869][T11386] device hsr_slave_0 entered promiscuous mode [ 494.933663][T11386] device hsr_slave_1 entered promiscuous mode [ 494.989262][T11386] debugfs: Directory 'hsr0' with parent '/' already present! [ 495.030713][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.037854][T11386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.045324][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.052581][T11386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.087189][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.100430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.109078][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.118060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.136085][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.147697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.156737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.164191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.191659][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.200645][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.207759][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.216995][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.226596][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 495.235821][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.247086][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 495.256187][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.266697][T11386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.283904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.291997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.303915][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.374925][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.387916][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.397303][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.405984][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.416738][T11386] device veth0_vlan entered promiscuous mode [ 495.428380][T11386] device veth1_vlan entered promiscuous mode [ 495.446421][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.455955][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.466885][T11386] device veth0_macvtap entered promiscuous mode [ 495.475682][T11386] device veth1_macvtap entered promiscuous mode [ 495.489750][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 495.500618][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.510936][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 495.522660][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.532889][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 495.543520][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.553807][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 495.564508][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.574742][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 495.585315][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.596582][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.605212][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 495.613803][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.622481][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.631304][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.641418][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 495.652833][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.663197][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 495.674161][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.684215][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 495.694806][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.704899][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 495.715476][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.725982][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 495.736584][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.747871][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.757547][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.768305][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.953012][ T26] audit: type=1800 audit(1579916568.236:151): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17161 res=0 [ 496.076552][ T26] audit: type=1800 audit(1579916568.356:152): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17161 res=0 [ 496.101895][ T26] audit: type=1800 audit(1579916568.386:153): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17161 res=0 [ 496.126702][ T26] audit: type=1800 audit(1579916568.406:154): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17161 res=0 01:42:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[], 0x133) 01:42:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:48 executing program 4: mlockall(0x5) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:48 executing program 5: mlockall(0x1) socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3c0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000240)) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) syz_open_procfs(0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:42:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 496.843122][T11405] attempt to access beyond end of device [ 496.853647][T11405] loop3: rw=2049, want=78, limit=63 [ 496.879995][T11405] buffer_io_error: 249 callbacks suppressed [ 496.880010][T11405] Buffer I/O error on dev loop3, logical block 77, lost async page write 01:42:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 496.954301][ T26] audit: type=1804 audit(1579916569.236:155): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir667194555/syzkaller.yvDw6c/126/file0/file0" dev="loop3" ino=53 res=1 01:42:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) 01:42:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 497.239879][ T9356] tipc: TX() has been purged, node left! 01:42:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) 01:42:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 497.961265][T11446] attempt to access beyond end of device [ 497.973684][T11446] loop3: rw=2049, want=78, limit=63 [ 497.979463][T11446] Buffer I/O error on dev loop3, logical block 77, lost async page write 01:42:50 executing program 5: mlockall(0x1) socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3c0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000240)) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) syz_open_procfs(0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:42:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) [ 498.735653][T11458] attempt to access beyond end of device [ 498.741511][T11458] loop3: rw=2049, want=78, limit=63 [ 498.746957][T11458] Buffer I/O error on dev loop3, logical block 77, lost async page write 01:42:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 01:42:51 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) [ 499.062082][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.085905][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.107875][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.142375][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.180306][ T9356] device bridge_slave_1 left promiscuous mode [ 499.213886][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.289870][ T9356] device bridge_slave_0 left promiscuous mode [ 499.296190][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.362778][ T9356] device veth1_macvtap left promiscuous mode [ 499.392752][ T9356] device veth0_macvtap left promiscuous mode [ 499.405106][ T9356] device veth1_vlan left promiscuous mode [ 499.434710][ T9356] device veth0_vlan left promiscuous mode [ 500.959914][ T9356] device hsr_slave_0 left promiscuous mode [ 500.999292][ T9356] device hsr_slave_1 left promiscuous mode [ 501.062382][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 501.073052][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 501.084465][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.123519][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.183955][ T9356] bond0 (unregistering): Released all slaves [ 501.295477][T11490] IPVS: ftp: loaded support on port[0] = 21 [ 501.350345][T11490] chnl_net:caif_netlink_parms(): no params data found [ 501.380843][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.387948][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.396596][T11490] device bridge_slave_0 entered promiscuous mode [ 501.404425][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.411790][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.420003][T11490] device bridge_slave_1 entered promiscuous mode [ 501.439532][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.450786][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.469423][T11490] team0: Port device team_slave_0 added [ 501.476553][T11490] team0: Port device team_slave_1 added [ 501.492950][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.500660][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.527847][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.539986][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.547156][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.574324][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.692061][T11490] device hsr_slave_0 entered promiscuous mode [ 501.752374][T11490] device hsr_slave_1 entered promiscuous mode [ 501.789253][T11490] debugfs: Directory 'hsr0' with parent '/' already present! [ 501.843495][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.850613][T11490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.857916][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.865070][T11490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.920710][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.938575][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.947712][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.962083][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.978852][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.991740][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.004024][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.011172][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.035779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.044909][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.052134][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.062300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.071945][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.085996][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.102198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.111185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.121264][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.138631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.146974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.158469][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.219930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.238718][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.250058][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.258520][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.271543][T11490] device veth0_vlan entered promiscuous mode [ 502.292413][T11490] device veth1_vlan entered promiscuous mode [ 502.310714][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.338025][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.347136][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.358963][T11490] device veth0_macvtap entered promiscuous mode [ 502.368586][T11490] device veth1_macvtap entered promiscuous mode [ 502.383712][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.394360][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.404906][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.415766][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.426775][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.437630][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.448028][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.458579][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.468695][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.479297][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.491726][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.500290][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.508384][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.516766][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.525741][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.538242][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.549054][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.559759][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.570315][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.580324][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.590938][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.600972][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.611757][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.622447][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.633339][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.644847][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.652657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.661859][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.854487][ T26] audit: type=1800 audit(1579916575.136:156): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17191 res=0 [ 502.955353][ T26] audit: type=1800 audit(1579916575.236:157): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17191 res=0 [ 502.982190][ T26] audit: type=1800 audit(1579916575.266:158): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17191 res=0 [ 503.051911][ T26] audit: type=1800 audit(1579916575.336:159): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17191 res=0 01:42:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:55 executing program 4: mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 01:42:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:55 executing program 5: mlockall(0x1) socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3c0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000240)) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) syz_open_procfs(0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:42:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 503.657778][T11291] block nbd0: Receive control failed (result -107) [ 503.664921][T11509] block nbd0: shutting down sockets [ 503.784664][T11291] block nbd0: Receive control failed (result -107) [ 503.791767][T11521] block nbd0: shutting down sockets 01:42:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 503.885767][T11517] attempt to access beyond end of device [ 503.903078][T11517] loop3: rw=2049, want=78, limit=63 01:42:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 503.930625][T11517] Buffer I/O error on dev loop3, logical block 77, lost async page write 01:42:56 executing program 4: mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 504.092420][T11291] block nbd0: Receive control failed (result -107) [ 504.100830][T11528] block nbd0: shutting down sockets 01:42:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x133) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) 01:42:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 504.343062][T11291] block nbd0: Receive control failed (result -107) [ 504.350337][T11538] block nbd0: shutting down sockets [ 504.389197][ T8114] tipc: TX() has been purged, node left! 01:42:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r11 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:42:56 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 504.766236][T11291] block nbd0: Receive control failed (result -107) [ 504.778374][T11554] block nbd0: shutting down sockets 01:42:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:42:57 executing program 4: mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:42:57 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 505.300340][T11291] block nbd0: Receive control failed (result -107) [ 505.307461][T11571] block nbd0: shutting down sockets 01:42:57 executing program 4: mlockall(0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:42:57 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:42:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:42:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 505.758103][T11291] block nbd0: Receive control failed (result -107) [ 505.775360][T11591] block nbd0: shutting down sockets [ 506.522808][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.542404][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.562964][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.571039][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.582933][ T8114] device bridge_slave_1 left promiscuous mode [ 506.589379][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.641821][ T8114] device bridge_slave_0 left promiscuous mode [ 506.648243][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.723686][ T8114] device veth1_macvtap left promiscuous mode [ 506.729801][ T8114] device veth0_macvtap left promiscuous mode [ 506.735882][ T8114] device veth1_vlan left promiscuous mode [ 506.742886][ T8114] device veth0_vlan left promiscuous mode [ 507.869622][ T8114] device hsr_slave_0 left promiscuous mode [ 507.929383][ T8114] device hsr_slave_1 left promiscuous mode [ 508.000976][ T8114] team0 (unregistering): Port device team_slave_1 removed [ 508.012525][ T8114] team0 (unregistering): Port device team_slave_0 removed [ 508.023054][ T8114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.062591][ T8114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.142944][ T8114] bond0 (unregistering): Released all slaves [ 508.245728][T11612] IPVS: ftp: loaded support on port[0] = 21 [ 508.304060][T11612] chnl_net:caif_netlink_parms(): no params data found [ 508.337174][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.345353][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.354123][T11612] device bridge_slave_0 entered promiscuous mode [ 508.362543][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.372096][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.381872][T11612] device bridge_slave_1 entered promiscuous mode [ 508.401700][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.414500][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.478455][T11612] team0: Port device team_slave_0 added [ 508.486649][T11612] team0: Port device team_slave_1 added [ 508.509787][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.517374][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.551479][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.568054][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.578101][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.611543][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.712031][T11612] device hsr_slave_0 entered promiscuous mode [ 508.749590][T11612] device hsr_slave_1 entered promiscuous mode [ 508.819326][T11612] debugfs: Directory 'hsr0' with parent '/' already present! [ 508.874510][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.882405][T11612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.891751][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.899193][T11612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.937494][T11612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.957726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.968853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.979646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.994414][T11612] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.007747][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.018097][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.026620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.052777][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.063754][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.073245][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.083634][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.094033][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.104342][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.114593][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.127886][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.142723][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 509.163355][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.174294][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.189414][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.254038][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.272120][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.281549][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.293037][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.304165][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.317515][T11612] device veth0_vlan entered promiscuous mode [ 509.329322][T11612] device veth1_vlan entered promiscuous mode [ 509.348273][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.362367][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.377328][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.388897][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.402395][T11612] device veth0_macvtap entered promiscuous mode [ 509.414270][T11612] device veth1_macvtap entered promiscuous mode [ 509.432409][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.455026][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.467490][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.479559][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.491945][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.503915][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.516135][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.528596][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.539017][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.550426][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.562310][T11612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.572800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.583370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 509.596410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 509.607267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.622042][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.635141][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.646423][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.659964][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.674858][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.686765][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.697608][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.708588][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.719692][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.733427][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.746472][T11612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.756675][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.767369][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.984303][ T26] audit: type=1800 audit(1579916582.266:160): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17217 res=0 [ 510.091079][ T26] audit: type=1800 audit(1579916582.376:161): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17217 res=0 [ 510.122334][ T26] audit: type=1800 audit(1579916582.406:162): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17217 res=0 [ 510.201712][ T26] audit: type=1800 audit(1579916582.486:163): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17217 res=0 01:43:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 01:43:02 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x8c, 0x0, 0x0, 0x70bd28, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x8c}}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x3f3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40001, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x3f3) 01:43:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:02 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:03 executing program 4: mlockall(0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:43:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 01:43:03 executing program 5: syz_open_procfs(0x0, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) 01:43:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:03 executing program 4: mlockall(0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:43:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 01:43:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0xffe}, 0x100}) dup3(r0, r1, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0xc) 01:43:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 01:43:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) [ 511.542587][ T9356] tipc: TX() has been purged, node left! 01:43:04 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:04 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 01:43:04 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:43:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:04 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:04 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0xffe}, 0x100}) dup3(r0, r1, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0xc) 01:43:04 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:04 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 513.382137][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.409421][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.430404][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.439093][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.470163][ T9356] device bridge_slave_1 left promiscuous mode [ 513.477427][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.530116][ T9356] device bridge_slave_0 left promiscuous mode [ 513.539690][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.594226][ T9356] device veth1_macvtap left promiscuous mode [ 513.601002][ T9356] device veth0_macvtap left promiscuous mode [ 513.608519][ T9356] device veth1_vlan left promiscuous mode [ 513.615760][ T9356] device veth0_vlan left promiscuous mode [ 514.759619][ T9356] device hsr_slave_0 left promiscuous mode [ 514.829374][ T9356] device hsr_slave_1 left promiscuous mode [ 514.881383][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 514.893369][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 514.904513][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.953487][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.012561][ T9356] bond0 (unregistering): Released all slaves [ 515.096258][T11730] IPVS: ftp: loaded support on port[0] = 21 [ 515.152487][T11730] chnl_net:caif_netlink_parms(): no params data found [ 515.182926][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.191037][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.199092][T11730] device bridge_slave_0 entered promiscuous mode [ 515.206920][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.214135][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.222025][T11730] device bridge_slave_1 entered promiscuous mode [ 515.281140][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.291941][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.314531][T11730] team0: Port device team_slave_0 added [ 515.321956][T11730] team0: Port device team_slave_1 added [ 515.341725][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.348886][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.377080][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.390154][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.397643][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.424901][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.494515][T11730] device hsr_slave_0 entered promiscuous mode [ 515.539625][T11730] device hsr_slave_1 entered promiscuous mode [ 515.589316][T11730] debugfs: Directory 'hsr0' with parent '/' already present! [ 515.640669][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.647766][T11730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.655152][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.662292][T11730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.708623][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.725063][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.734592][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.744461][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.761210][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.781768][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.791194][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.799305][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.823840][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.834132][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.841259][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.850907][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.863046][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.871755][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.889090][T11730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.900181][T11730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.912487][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.921835][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.930794][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.949439][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.957060][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.967467][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.042393][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.057244][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.066908][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.077409][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.087847][T11730] device veth0_vlan entered promiscuous mode [ 516.099034][T11730] device veth1_vlan entered promiscuous mode [ 516.106292][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.127914][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.137279][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.148005][T11730] device veth0_macvtap entered promiscuous mode [ 516.157722][T11730] device veth1_macvtap entered promiscuous mode [ 516.172020][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 516.183823][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.195200][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 516.206450][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.216545][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 516.227153][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.237462][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 516.248536][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.267110][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 516.278399][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.290266][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.298656][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.307519][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.316166][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.325622][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.336040][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 516.348130][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.358421][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 516.369608][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.379918][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 516.390476][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.400973][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 516.411557][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.421744][T11730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 516.432437][T11730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.443806][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.452678][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.462780][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.672071][ T26] audit: type=1800 audit(1579916588.956:164): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17239 res=0 [ 516.803763][ T26] audit: type=1800 audit(1579916589.086:165): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17239 res=0 [ 516.874857][ T26] audit: type=1800 audit(1579916589.156:166): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17239 res=0 01:43:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0xa7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:43:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:09 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:43:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 517.608473][T11291] block nbd0: Receive control failed (result -107) [ 517.616974][T11749] block nbd0: shutting down sockets 01:43:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:10 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 01:43:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:10 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 518.028114][T11291] block nbd0: Receive control failed (result -107) [ 518.053784][T11773] block nbd0: shutting down sockets [ 518.112561][ T42] tipc: TX() has been purged, node left! 01:43:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1107000000000000000005000000080003002773db3d11c0ee17a506b6e171f3c86c5607d5c7225a55df7c0d6ffdbf667f069baa277f4d640f18d7fc2b1c91f8c0925df018e1b172ae4797a86aaa2ffe1385e8d43c44a546fa7887697d6e29badc43b07c9e6e971a970d270cb2da20b0b6c15b6a", @ANYRES32, @ANYBLOB="06220184", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 01:43:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:10 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:10 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 518.565215][T11291] block nbd0: Receive control failed (result -107) [ 518.572396][T11793] block nbd0: shutting down sockets 01:43:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:10 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:11 executing program 5: times(&(0x7f0000000140)) dup(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000500000100000001000000024000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 01:43:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:11 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 518.975822][T11291] block nbd0: Receive control failed (result -107) [ 518.986523][T11814] block nbd0: shutting down sockets 01:43:11 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 519.073471][T11818] EXT4-fs (loop5): #blocks per group too big: 16386 01:43:11 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:11 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 519.432783][T11291] block nbd0: Receive control failed (result -107) [ 519.440684][T11832] block nbd0: shutting down sockets [ 520.252218][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.259905][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.268076][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.275643][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.283565][ T42] device bridge_slave_1 left promiscuous mode [ 520.289985][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.359907][ T42] device bridge_slave_0 left promiscuous mode [ 520.366127][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.422390][ T42] device veth1_macvtap left promiscuous mode [ 520.428616][ T42] device veth0_macvtap left promiscuous mode [ 520.435290][ T42] device veth1_vlan left promiscuous mode [ 520.441233][ T42] device veth0_vlan left promiscuous mode [ 521.579568][ T42] device hsr_slave_0 left promiscuous mode [ 521.639315][ T42] device hsr_slave_1 left promiscuous mode [ 521.711500][ T42] team0 (unregistering): Port device team_slave_1 removed [ 521.721883][ T42] team0 (unregistering): Port device team_slave_0 removed [ 521.733167][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.802347][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.882546][ T42] bond0 (unregistering): Released all slaves [ 521.986559][T11850] IPVS: ftp: loaded support on port[0] = 21 [ 522.043017][T11850] chnl_net:caif_netlink_parms(): no params data found [ 522.122402][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.130232][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.138113][T11850] device bridge_slave_0 entered promiscuous mode [ 522.149016][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.157227][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.168569][T11850] device bridge_slave_1 entered promiscuous mode [ 522.194289][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.205262][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.235659][T11850] team0: Port device team_slave_0 added [ 522.242844][T11850] team0: Port device team_slave_1 added [ 522.264629][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.271658][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.301961][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.316623][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.325807][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.356189][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.471860][T11850] device hsr_slave_0 entered promiscuous mode [ 522.519604][T11850] device hsr_slave_1 entered promiscuous mode [ 522.570130][T11850] debugfs: Directory 'hsr0' with parent '/' already present! [ 522.611933][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.619101][T11850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.626436][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.633537][T11850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.675370][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.690147][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.699985][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.708958][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.722294][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.733694][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.742364][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.749448][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.771160][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.780410][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.787545][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.799580][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.812121][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.821604][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.836436][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.849017][T11850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.861532][T11850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.870886][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.888123][T11850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.896431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.905918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.963876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.977789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.989121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.997776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.007809][T11850] device veth0_vlan entered promiscuous mode [ 523.018983][T11850] device veth1_vlan entered promiscuous mode [ 523.039037][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.048148][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.058440][T11850] device veth0_macvtap entered promiscuous mode [ 523.068705][T11850] device veth1_macvtap entered promiscuous mode [ 523.084284][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 523.095148][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.105105][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 523.115926][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.125903][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 523.136933][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.146853][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 523.157873][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.167972][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 523.178671][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.190051][T11850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.197853][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.206651][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.214940][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.223658][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.234597][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 523.246326][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.257323][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 523.268024][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.278370][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 523.289564][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.300206][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 523.310801][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.321019][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 523.331659][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.343887][T11850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.352344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.362051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.556668][ T26] audit: type=1800 audit(1579916595.836:167): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16609 res=0 [ 523.681723][ T26] audit: type=1800 audit(1579916595.966:168): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16609 res=0 [ 523.752216][ T26] audit: type=1800 audit(1579916596.036:169): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16609 res=0 01:43:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1}) 01:43:16 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:16 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) 01:43:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:16 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:16 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCSETD(r0, 0x5437, 0x0) socket$kcm(0x10, 0x0, 0x0) [ 524.375057][T11291] block nbd0: Receive control failed (result -107) [ 524.383619][T11870] block nbd0: shutting down sockets 01:43:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:16 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:16 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:16 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) [ 524.656927][T11291] block nbd0: Receive control failed (result -107) [ 524.664385][T11883] block nbd0: shutting down sockets 01:43:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 524.904735][T11291] block nbd0: Receive control failed (result -107) [ 524.917039][T11900] block nbd0: shutting down sockets [ 524.930670][ T9356] tipc: TX() has been purged, node left! 01:43:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCSETD(r0, 0x5437, 0x0) socket$kcm(0x10, 0x0, 0x0) 01:43:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:17 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, 0x0, 0x0) 01:43:17 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 525.634916][T11291] block nbd0: Receive control failed (result -107) [ 525.646727][T11930] block nbd0: shutting down sockets 01:43:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:43:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0xf}, 0x100}) dup3(r0, r1, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0xc) 01:43:18 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 526.474807][T11291] block nbd0: Receive control failed (result -107) [ 526.482752][T11969] block nbd0: shutting down sockets 01:43:18 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) 01:43:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) [ 527.963093][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.999348][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.039401][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.047056][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.113397][ T9356] device bridge_slave_1 left promiscuous mode [ 528.142932][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.214201][ T9356] device bridge_slave_0 left promiscuous mode [ 528.223974][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.303793][ T9356] device veth1_macvtap left promiscuous mode [ 528.325507][ T9356] device veth0_macvtap left promiscuous mode [ 528.362176][ T9356] device veth1_vlan left promiscuous mode [ 528.368005][ T9356] device veth0_vlan left promiscuous mode [ 529.989480][ T9356] device hsr_slave_0 left promiscuous mode [ 530.039415][ T9356] device hsr_slave_1 left promiscuous mode [ 530.091089][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 530.102434][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 530.112677][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.163842][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.241698][ T9356] bond0 (unregistering): Released all slaves [ 530.356018][T12007] IPVS: ftp: loaded support on port[0] = 21 [ 530.412009][T12007] chnl_net:caif_netlink_parms(): no params data found [ 530.479332][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.486453][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.495405][T12007] device bridge_slave_0 entered promiscuous mode [ 530.503954][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.511841][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.520338][T12007] device bridge_slave_1 entered promiscuous mode [ 530.543907][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.554875][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.577119][T12007] team0: Port device team_slave_0 added [ 530.584151][T12007] team0: Port device team_slave_1 added [ 530.602190][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.609992][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.636306][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.648739][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.656313][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.682716][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.754557][T12007] device hsr_slave_0 entered promiscuous mode [ 530.809615][T12007] device hsr_slave_1 entered promiscuous mode [ 530.869356][T12007] debugfs: Directory 'hsr0' with parent '/' already present! [ 530.917303][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.924604][T12007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.931997][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.939215][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.972822][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.002688][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.011265][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.026696][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.040268][T12007] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.064202][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.075437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.082652][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.090981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.099540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.106714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.124752][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.143319][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.151807][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.161703][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.170741][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.191189][T12007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.216795][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.225046][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.236164][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.293542][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.307484][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.316686][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.324820][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.335442][T12007] device veth0_vlan entered promiscuous mode [ 531.347066][T12007] device veth1_vlan entered promiscuous mode [ 531.363422][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.372057][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.385561][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 531.394473][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.407105][T12007] device veth0_macvtap entered promiscuous mode [ 531.417216][T12007] device veth1_macvtap entered promiscuous mode [ 531.431004][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.441694][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.451911][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.462787][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.472758][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.483407][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.493569][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.504215][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.514874][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 531.525523][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.536822][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.544716][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.553318][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 531.561689][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.570765][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.581208][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.592274][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.602400][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.613299][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.623703][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.634608][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.645304][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.656189][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.666166][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 531.676660][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.688370][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.696792][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.706710][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.910012][ T26] audit: type=1800 audit(1579916604.196:170): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17121 res=0 [ 532.042009][ T26] audit: type=1800 audit(1579916604.326:171): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17121 res=0 [ 532.115547][ T26] audit: type=1800 audit(1579916604.396:172): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17121 res=0 01:43:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 01:43:24 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {0xf}, 0x100}) dup3(r0, r1, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0xc) 01:43:24 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) [ 532.612470][ T0] NOHZ: local_softirq_pending 08 01:43:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 532.729079][T11291] block nbd0: Receive control failed (result -107) [ 532.736517][T12024] block nbd0: shutting down sockets 01:43:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 01:43:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1107000000000000000007000000080003002773db3d11c0ee17a506b6e171f3c86c5607d5c7225a55df7c0d6ffdbf667f069baa277f4d640f18d7fc2b1c91f8c0925df018e1b172ae4797a86aaa2ffe1385e8d43c44a546fa7887697d6e29badc43b07c9e6e971a970d270cb2da20b0b6c15b6a", @ANYRES32, @ANYBLOB="06220184", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 01:43:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 533.056862][T11291] block nbd0: Receive control failed (result -107) [ 533.064124][T12039] block nbd0: shutting down sockets 01:43:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 01:43:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:25 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 01:43:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:25 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) [ 533.372566][ T8149] tipc: TX() has been purged, node left! 01:43:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 01:43:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 533.569290][T11291] block nbd0: Receive control failed (result -107) [ 533.577373][T12065] block nbd0: shutting down sockets 01:43:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 01:43:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:26 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 01:43:26 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) [ 534.092874][T11291] block nbd0: Receive control failed (result -107) [ 534.100989][T12088] block nbd0: shutting down sockets 01:43:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 01:43:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:26 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:26 executing program 5: clock_settime(0x0, &(0x7f0000000140)={0x0, 0x1c9c380}) 01:43:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) recvmmsg(r2, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)=""/16, 0xfffffe53}, {&(0x7f0000000800)=""/82, 0x5b}, {&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/50, 0x32}], 0x6}}], 0x2, 0x0, 0x0) [ 534.540669][T12101] FAT-fs (loop2): bogus number of reserved sectors [ 534.552817][T11291] block nbd0: Receive control failed (result -107) [ 534.560028][T12104] block nbd0: shutting down sockets [ 534.629339][T12101] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:27 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) [ 535.415726][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.432917][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.450342][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.457875][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.491791][ T8149] device bridge_slave_1 left promiscuous mode [ 535.508269][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.590613][ T8149] device bridge_slave_0 left promiscuous mode [ 535.597848][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.653655][ T8149] device veth1_macvtap left promiscuous mode [ 535.659731][ T8149] device veth0_macvtap left promiscuous mode [ 535.665951][ T8149] device veth1_vlan left promiscuous mode [ 535.672087][ T8149] device veth0_vlan left promiscuous mode [ 536.829489][ T8149] device hsr_slave_0 left promiscuous mode [ 536.879374][ T8149] device hsr_slave_1 left promiscuous mode [ 536.950681][ T8149] team0 (unregistering): Port device team_slave_1 removed [ 536.961495][ T8149] team0 (unregistering): Port device team_slave_0 removed [ 536.972311][ T8149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.022246][ T8149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.092962][ T8149] bond0 (unregistering): Released all slaves [ 537.196958][T12131] IPVS: ftp: loaded support on port[0] = 21 [ 537.255377][T12131] chnl_net:caif_netlink_parms(): no params data found [ 537.287338][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.294477][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.302446][T12131] device bridge_slave_0 entered promiscuous mode [ 537.310392][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.317563][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.327369][T12131] device bridge_slave_1 entered promiscuous mode [ 537.381192][T12131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.393104][T12131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.416189][T12131] team0: Port device team_slave_0 added [ 537.423446][T12131] team0: Port device team_slave_1 added [ 537.442560][T12131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.449724][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.477536][T12131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.489955][T12131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.497557][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.525675][T12131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.611465][T12131] device hsr_slave_0 entered promiscuous mode [ 537.649739][T12131] device hsr_slave_1 entered promiscuous mode [ 537.709260][T12131] debugfs: Directory 'hsr0' with parent '/' already present! [ 537.763294][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.770411][T12131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.777899][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.785203][T12131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.828452][T12131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.841460][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.850204][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.858356][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.872407][T12131] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.886023][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.894962][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.902345][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.923165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.932481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.939757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.962275][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.971988][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.981017][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.990394][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.998937][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.010855][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.027040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.037403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 538.050882][T12131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.119702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.128823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.137587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.145569][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.153924][T12131] device veth0_vlan entered promiscuous mode [ 538.166280][T12131] device veth1_vlan entered promiscuous mode [ 538.185723][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.194264][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.202865][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.215065][T12131] device veth0_macvtap entered promiscuous mode [ 538.226448][T12131] device veth1_macvtap entered promiscuous mode [ 538.243362][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.254182][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.264929][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.275465][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.285385][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.295879][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.306332][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.316898][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.326866][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 538.337408][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.348521][T12131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.356343][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.365843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.376974][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.388304][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.398505][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.410030][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.419996][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.430536][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.440738][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.452028][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.462115][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 538.472849][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.484145][T12131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.492359][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.501785][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.715303][ T26] audit: type=1800 audit(1579916610.992:173): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17276 res=0 [ 538.847670][ T26] audit: type=1800 audit(1579916611.122:174): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17276 res=0 [ 538.919035][ T26] audit: type=1800 audit(1579916611.192:175): pid=12144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17276 res=0 01:43:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x1}]}, &(0x7f0000000180)=0x10) r2 = dup2(r1, r0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x83, &(0x7f0000000100)={r4, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x84) 01:43:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) creat(0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"829b24bc84fbcddec106889762f88c32"}, 0x3, 0x0, 0x5}}}, 0xbd) getgid() stat(0x0, 0x0) lstat(0x0, &(0x7f0000000280)) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 01:43:31 executing program 4: mlockall(0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 01:43:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 539.509930][T11291] block nbd0: Receive control failed (result -107) [ 539.517100][T12146] block nbd0: shutting down sockets [ 539.554213][T12154] FAT-fs (loop2): bogus number of reserved sectors 01:43:31 executing program 5: mlockall(0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000240)) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:43:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 539.606378][T12154] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:32 executing program 3: ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:43:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 539.855184][T11291] block nbd0: Receive control failed (result -107) [ 539.880155][T12171] block nbd0: shutting down sockets 01:43:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x62, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000000)) 01:43:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 540.114017][T12180] FAT-fs (loop2): bogus number of reserved sectors 01:43:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398188a9856e2a271", 0x3a}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5f", 0x12}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50ea1539029730c0c090a848119c6901f97e74a14e0366d32a41f20", 0x35}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 540.222676][T12180] FAT-fs (loop2): Can't find a valid FAT filesystem [ 540.260411][ T9356] tipc: TX() has been purged, node left! [ 540.266541][T11291] block nbd0: Receive control failed (result -107) [ 540.273986][T12183] block nbd0: shutting down sockets 01:43:32 executing program 3: getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x58ca, 0x0, 0x4d97) 01:43:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398188a9856e2a271", 0x3a}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5f", 0x12}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50ea1539029730c0c090a848119c6901f97e74a14e0366d32a41f20", 0x35}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 540.879803][T12213] FAT-fs (loop2): bogus number of reserved sectors [ 540.959590][T12213] FAT-fs (loop2): Can't find a valid FAT filesystem [ 541.952281][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.960256][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.982813][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.998429][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.007263][ T9356] device bridge_slave_1 left promiscuous mode [ 542.014222][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state 01:43:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x1}, 0x20) 01:43:34 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x10, 0x0) 01:43:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:34 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r1, 0x711, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 542.073114][ T9356] device bridge_slave_0 left promiscuous mode [ 542.080289][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.150953][ T9356] device veth1_macvtap left promiscuous mode [ 542.167206][T11291] block nbd0: Receive control failed (result -107) [ 542.174946][T12230] block nbd0: shutting down sockets [ 542.177960][ T9356] device veth0_macvtap left promiscuous mode 01:43:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 542.236645][ T9356] device veth1_vlan left promiscuous mode [ 542.252907][T12238] FAT-fs (loop2): bogus number of reserved sectors [ 542.274157][ T9356] device veth0_vlan left promiscuous mode 01:43:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x4, 0x0, {"829b24bc84fbcddec106889762f88c32"}, 0x3}}}, 0xbd) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 542.281286][T12238] FAT-fs (loop2): Can't find a valid FAT filesystem [ 543.909596][ T9356] device hsr_slave_0 left promiscuous mode [ 543.949449][ T9356] device hsr_slave_1 left promiscuous mode [ 544.001428][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 544.012159][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 544.023288][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.083367][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.143177][ T9356] bond0 (unregistering): Released all slaves [ 544.246756][T12263] IPVS: ftp: loaded support on port[0] = 21 [ 544.299479][T12263] chnl_net:caif_netlink_parms(): no params data found [ 544.332108][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.339279][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.347296][T12263] device bridge_slave_0 entered promiscuous mode [ 544.354931][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.362186][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.370786][T12263] device bridge_slave_1 entered promiscuous mode [ 544.390546][T12263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.401354][T12263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.420985][T12263] team0: Port device team_slave_0 added [ 544.427789][T12263] team0: Port device team_slave_1 added [ 544.478185][T12263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.485599][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.515430][T12263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.528155][T12263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.541351][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.572470][T12263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.655251][T12263] device hsr_slave_0 entered promiscuous mode [ 544.712404][T12263] device hsr_slave_1 entered promiscuous mode [ 544.772497][T12263] debugfs: Directory 'hsr0' with parent '/' already present! [ 544.823930][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.831212][T12263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.838642][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.845750][T12263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.891466][T12263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.905326][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.914185][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.922655][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.937863][T12263] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.950690][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.959762][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.966884][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.992097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.001728][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.008825][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.018018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.027476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 545.043505][T12263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.054604][T12263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.067166][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.075791][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.085304][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 545.094344][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 545.120891][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.129901][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.141149][T12263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.201421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.210972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.220113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.228060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.237727][T12263] device veth0_vlan entered promiscuous mode [ 545.249356][T12263] device veth1_vlan entered promiscuous mode [ 545.267615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.276771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.288207][T12263] device veth0_macvtap entered promiscuous mode [ 545.298194][T12263] device veth1_macvtap entered promiscuous mode [ 545.312706][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 545.323477][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.333573][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 545.344198][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.354160][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 545.364741][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.375454][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 545.386454][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.396509][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 545.407435][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.418667][T12263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.427121][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.436059][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.444507][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.453224][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.464027][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 545.475430][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.485977][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 545.497123][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.507163][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 545.517905][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.528078][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 545.538591][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.548479][T12263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 545.559353][T12263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.571597][T12263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.580260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.589041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.795328][ T26] audit: type=1800 audit(1579916618.072:176): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17322 res=0 [ 545.872085][ T26] audit: type=1800 audit(1579916618.152:177): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17322 res=0 [ 545.943321][ T26] audit: type=1800 audit(1579916618.222:178): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17322 res=0 01:43:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2}, &(0x7f0000000100)=0x10) 01:43:38 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fbfffffd) 01:43:38 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x4, 0x0, {"829b24bc84fbcddec106889762f88c32"}, 0x3}}}, 0xbd) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 546.591100][T12282] FAT-fs (loop2): bogus number of reserved sectors [ 546.603276][T12282] FAT-fs (loop2): Can't find a valid FAT filesystem [ 546.618377][T12284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 546.631313][T11291] block nbd0: Receive control failed (result -107) [ 546.647466][T12277] block nbd0: shutting down sockets 01:43:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) 01:43:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 546.819478][ T26] audit: type=1800 audit(1579916619.102:179): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17334 res=0 01:43:39 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 01:43:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 547.023974][T11291] block nbd0: Receive control failed (result -107) [ 547.031659][T12298] block nbd0: shutting down sockets 01:43:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398188a9856e2a271", 0x3a}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc3", 0x13}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50ea1539029730c0c090a848119c6901f97e74a14e0366d32a41f20", 0x35}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 547.153946][T12305] FAT-fs (loop2): bogus number of reserved sectors [ 547.174049][T12305] FAT-fs (loop2): Can't find a valid FAT filesystem [ 547.179218][ T9356] tipc: TX() has been purged, node left! 01:43:39 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 547.411823][T11291] block nbd0: Receive control failed (result -107) [ 547.419067][T12310] block nbd0: shutting down sockets 01:43:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x4, 0x0, {"829b24bc84fbcddec106889762f88c32"}, 0x3}}}, 0xbd) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:43:39 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 01:43:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3fd}], 0x0, 0x0) [ 547.962347][T12335] FAT-fs (loop2): bogus number of reserved sectors [ 548.075794][T12335] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1107000000000000000006000000080003002773db3d11c0ee17a506b6e171f3c86c5607d5c7225a55df7c0d6ffdbf667f069baa277f4d640f18d7fc2b1c91f8c0925df018e1b172ae4797a86aaa2ffe1385e8d43c44a546fa7887697d6e29badc43b07c9e6e971a970d270cb2da20b0b6c15b6a", @ANYRES32, @ANYBLOB="06220184", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 01:43:40 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 548.286624][T12349] EXT4-fs (loop4): unable to read superblock [ 548.379784][T12349] EXT4-fs (loop4): unable to read superblock 01:43:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x1, 0x2a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x5522, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f00000000c0)=0x10000) [ 548.853468][T12368] FAT-fs (loop2): bogus number of reserved sectors [ 548.972394][T12368] FAT-fs (loop2): Can't find a valid FAT filesystem [ 549.055378][T12380] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #65536 [ 549.145967][T12387] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.3' sets config #65536 [ 549.532098][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.539941][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.547674][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.555754][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.564850][ T9356] device bridge_slave_1 left promiscuous mode [ 549.571174][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.620169][ T9356] device bridge_slave_0 left promiscuous mode [ 549.626597][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.663895][ T9356] device veth1_macvtap left promiscuous mode [ 549.670350][ T9356] device veth0_macvtap left promiscuous mode [ 549.676435][ T9356] device veth1_vlan left promiscuous mode [ 549.682395][ T9356] device veth0_vlan left promiscuous mode [ 550.859602][ T9356] device hsr_slave_0 left promiscuous mode [ 550.899363][ T9356] device hsr_slave_1 left promiscuous mode [ 550.951549][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 550.963464][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 550.973987][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.012799][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.103374][ T9356] bond0 (unregistering): Released all slaves [ 551.196322][T12392] IPVS: ftp: loaded support on port[0] = 21 [ 551.252806][T12392] chnl_net:caif_netlink_parms(): no params data found [ 551.286104][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.293294][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.301807][T12392] device bridge_slave_0 entered promiscuous mode [ 551.309949][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.317380][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.325679][T12392] device bridge_slave_1 entered promiscuous mode [ 551.381872][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.393449][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.416567][T12392] team0: Port device team_slave_0 added [ 551.423420][T12392] team0: Port device team_slave_1 added [ 551.441299][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.448289][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.475025][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.488292][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.496425][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.523104][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.591546][T12392] device hsr_slave_0 entered promiscuous mode [ 551.689543][T12392] device hsr_slave_1 entered promiscuous mode [ 551.741968][T12392] debugfs: Directory 'hsr0' with parent '/' already present! [ 551.792050][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.799274][T12392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.806895][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.814019][T12392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.851051][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.865029][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.873676][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.882572][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.903050][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.922999][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.932836][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.940785][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.960513][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.969836][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.976892][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.988879][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.998245][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.016815][T12392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.027810][T12392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.041089][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 552.050708][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.059469][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.068840][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.088161][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.097738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.105821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.160062][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 552.179109][T12392] device veth0_vlan entered promiscuous mode [ 552.187887][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.197338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.205522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.218896][T12392] device veth1_vlan entered promiscuous mode [ 552.236965][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 552.247304][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 552.258562][T12392] device veth0_macvtap entered promiscuous mode [ 552.268431][T12392] device veth1_macvtap entered promiscuous mode [ 552.283551][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 552.294629][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.304745][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 552.315721][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.327027][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 552.337783][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.348262][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 552.359053][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.369314][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 552.380482][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.392147][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.401295][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 552.410075][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 552.419080][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.428350][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.439390][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 552.452692][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.463556][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 552.474511][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.484698][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 552.495471][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.505731][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 552.516520][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.527117][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 552.537922][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.550711][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.558890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.568395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.750353][ T26] audit: type=1800 audit(1579916625.032:180): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17352 res=0 [ 552.828678][ T26] audit: type=1800 audit(1579916625.102:181): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17352 res=0 [ 552.901940][ T26] audit: type=1800 audit(1579916625.182:182): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17352 res=0 [ 553.090207][ T0] NOHZ: local_softirq_pending 08 01:43:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x4, 0x0, {"829b24bc84fbcddec106889762f88c32"}, 0x3}}}, 0xbd) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:43:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:45 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) 01:43:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110700000000000000000c000000080003002773db3d11c0ee17a506b6e171f3c86c5607d5c7225a55df7c0d6ffdbf667f069baa277f4d640f18d7fc2b1c91f8c0925df018e1b172ae4797a86aaa2ffe1385e8d43c44a546fa7887697d6e29badc43b07c9e6e971a970d270cb2da20b0b6c15b6a", @ANYRES32, @ANYBLOB="06220184", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 01:43:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 553.541468][T12412] FAT-fs (loop2): bogus number of reserved sectors [ 553.557300][T12412] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) dup(0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398188a9856e2a271", 0x3a}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50ea1539029730c0c090a848119c6901f97e74a14e0366d32a41f20568b0286af371901c18644e63e9541c938323759b37dcee2283cb0c278f3d0153fb63df44025f2e5a873751f69dba4301e380b862047c6e8e72e41cb05", 0x72}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 01:43:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 554.030482][T12433] FAT-fs (loop2): bogus number of reserved sectors [ 554.072353][T12433] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 554.149948][ T9356] tipc: TX() has been purged, node left! 01:43:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/152, 0x20000318) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:43:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398188a9856e2a271", 0x3a}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc3965964600a15671c7a84d49ab99894645fb562ab4393776b80ffac54d7", 0x30}, {&(0x7f0000000440)="a8", 0x1}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x1, 0x0) mount$9p_xen(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) [ 554.802361][T12474] FAT-fs (loop2): bogus number of reserved sectors [ 554.902609][T12474] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0) clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x0, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40001, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) 01:43:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x100000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:43:47 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 555.274809][T12494] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 01:43:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:47 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) [ 555.593031][T12496] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 555.638080][T12511] FAT-fs (loop2): bogus number of reserved sectors [ 555.710340][T12511] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:48 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:48 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 556.572342][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.581707][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.590103][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.597963][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.606548][ T9356] device bridge_slave_1 left promiscuous mode [ 556.613419][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.679768][ T9356] device bridge_slave_0 left promiscuous mode [ 556.687021][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.743405][ T9356] device veth1_macvtap left promiscuous mode [ 556.749685][ T9356] device veth0_macvtap left promiscuous mode [ 556.755924][ T9356] device veth1_vlan left promiscuous mode [ 556.762411][ T9356] device veth0_vlan left promiscuous mode [ 557.919801][ T9356] device hsr_slave_0 left promiscuous mode [ 557.959632][ T9356] device hsr_slave_1 left promiscuous mode [ 558.030888][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 558.042647][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 558.053396][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.092388][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.161857][ T9356] bond0 (unregistering): Released all slaves [ 558.286087][T12542] IPVS: ftp: loaded support on port[0] = 21 [ 558.342784][T12542] chnl_net:caif_netlink_parms(): no params data found [ 558.374448][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.381697][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.391037][T12542] device bridge_slave_0 entered promiscuous mode [ 558.439411][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.446603][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.458800][T12542] device bridge_slave_1 entered promiscuous mode [ 558.485366][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.500189][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.527201][T12542] team0: Port device team_slave_0 added [ 558.537905][T12542] team0: Port device team_slave_1 added [ 558.559346][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.566460][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.596715][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.614059][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.621293][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.651343][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.733418][T12542] device hsr_slave_0 entered promiscuous mode [ 558.780824][T12542] device hsr_slave_1 entered promiscuous mode [ 558.849592][T12542] debugfs: Directory 'hsr0' with parent '/' already present! [ 558.893168][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.900290][T12542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.907625][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.914762][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.953669][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.967950][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.977778][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.987880][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.001397][T12542] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.013096][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.022582][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.029652][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.051729][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.060806][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.067870][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.076915][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 559.086798][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.095985][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.107250][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.120070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.134670][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.153257][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.161085][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.172500][T12542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.231898][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.241163][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.250386][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 559.258199][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 559.272685][T12542] device veth0_vlan entered promiscuous mode [ 559.283455][T12542] device veth1_vlan entered promiscuous mode [ 559.292621][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.312619][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.322049][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.332773][T12542] device veth0_macvtap entered promiscuous mode [ 559.342580][T12542] device veth1_macvtap entered promiscuous mode [ 559.357434][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.368390][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.378944][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.390221][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.400511][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.411463][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.422063][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.432733][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.442651][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 559.453831][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.465067][T12542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.474028][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.482943][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.491395][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.501487][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.512017][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.523375][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.533940][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.545114][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.555205][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.565788][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.576217][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.586939][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.597082][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 559.607762][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.619506][T12542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.628141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.637310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.841469][ T26] audit: type=1800 audit(1579916632.122:183): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16641 res=0 [ 559.912851][ T26] audit: type=1800 audit(1579916632.192:184): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16641 res=0 01:43:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1107000000000000000008000000080003002773db3d11c0ee17a506b6e171f3c86c5607d5c7225a55df7c0d6ffdbf667f069baa277f4d640f18d7fc2b1c91f8c0925df018e1b172ae4797a86aaa2ffe1385e8d43c44a546fa7887697d6e29badc43b07c9e6e971a970d270cb2da20b0b6c15b6a", @ANYRES32, @ANYBLOB="06220184", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 01:43:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:52 executing program 5: mlockall(0x1) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) syz_open_procfs(0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 01:43:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) 01:43:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 560.653998][T12566] FAT-fs (loop2): bogus number of reserved sectors [ 560.699051][T12566] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc841}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x148}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:43:53 executing program 4: mlockall(0x1) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:43:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 01:43:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 561.135422][T12587] FAT-fs (loop2): bogus number of reserved sectors [ 561.202026][T12587] FAT-fs (loop2): Can't find a valid FAT filesystem [ 561.289557][ T8114] tipc: TX() has been purged, node left! 01:43:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:43:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 561.666257][T12605] block nbd0: shutting down sockets 01:43:54 executing program 5: 01:43:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getpeername(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 01:43:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 562.571478][T12618] FAT-fs (loop2): bogus number of reserved sectors [ 562.580358][T12616] block nbd0: shutting down sockets [ 562.617710][T12618] FAT-fs (loop2): Can't find a valid FAT filesystem 01:43:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)) 01:43:55 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 01:43:55 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) setxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)=@random={'security.', 'upperdir'}, 0x0, 0x0, 0x0) [ 563.102809][T12640] overlayfs: filesystem on './bus' not supported as upperdir [ 563.110532][T12638] block nbd0: shutting down sockets [ 563.118919][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.165067][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.202369][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.238694][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.291293][ T8114] device bridge_slave_1 left promiscuous mode [ 563.297820][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state 01:43:55 executing program 4: mlockall(0x1) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 01:43:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:43:55 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getgid() stat(0x0, 0x0) lstat(0x0, &(0x7f0000000280)) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 563.383053][ T8114] device bridge_slave_0 left promiscuous mode [ 563.401632][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.457481][ T8114] device veth1_macvtap left promiscuous mode [ 563.489229][ T8114] device veth0_macvtap left promiscuous mode [ 563.520948][T12650] FAT-fs (loop2): bogus number of reserved sectors [ 563.560086][ T8114] device veth1_vlan left promiscuous mode [ 563.579278][T12650] FAT-fs (loop2): Can't find a valid FAT filesystem [ 563.608249][ T8114] device veth0_vlan left promiscuous mode [ 565.269638][ T8114] device hsr_slave_0 left promiscuous mode [ 565.329470][ T8114] device hsr_slave_1 left promiscuous mode [ 565.380615][ T8114] team0 (unregistering): Port device team_slave_1 removed [ 565.391819][ T8114] team0 (unregistering): Port device team_slave_0 removed [ 565.402917][ T8114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.462591][ T8114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.523134][ T8114] bond0 (unregistering): Released all slaves [ 565.616087][T12665] IPVS: ftp: loaded support on port[0] = 21 [ 565.671326][T12665] chnl_net:caif_netlink_parms(): no params data found [ 565.744704][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.755052][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.763110][T12665] device bridge_slave_0 entered promiscuous mode [ 565.774233][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.781459][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.793029][T12665] device bridge_slave_1 entered promiscuous mode [ 565.818099][T12665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.832553][T12665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.854158][T12665] team0: Port device team_slave_0 added [ 565.864837][T12665] team0: Port device team_slave_1 added [ 565.882277][T12665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.893795][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.924154][T12665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.936015][T12665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.946740][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.977034][T12665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.052799][T12665] device hsr_slave_0 entered promiscuous mode [ 566.099546][T12665] device hsr_slave_1 entered promiscuous mode [ 566.139657][T12665] debugfs: Directory 'hsr0' with parent '/' already present! [ 566.185107][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.192408][T12665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.199731][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.206791][T12665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.254070][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.271901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.283317][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.291362][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.305337][T12665] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.316727][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.325787][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.332866][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.343950][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.353197][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.360871][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.386629][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.406090][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.417001][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.427920][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.443028][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.453866][T12665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.469446][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 566.476933][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 566.488785][T12665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.540665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.560648][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.570150][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.578242][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.588135][T12665] device veth0_vlan entered promiscuous mode [ 566.600638][T12665] device veth1_vlan entered promiscuous mode [ 566.620761][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.629744][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 566.638791][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.650151][T12665] device veth0_macvtap entered promiscuous mode [ 566.660181][T12665] device veth1_macvtap entered promiscuous mode [ 566.675536][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.686259][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.696424][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.707394][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.717302][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.728060][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.738033][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.748737][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.758886][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 566.770075][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.782484][T12665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.790841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.800056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.812254][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.823189][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.833471][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.844226][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.855551][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.867132][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.877129][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.888141][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.898740][T12665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 566.910015][T12665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.922390][T12665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.931771][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 566.942247][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.157203][ T26] audit: type=1800 audit(1579916639.432:185): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16849 res=0 [ 567.170277][ T0] NOHZ: local_softirq_pending 08 [ 567.193372][ T26] audit: type=1800 audit(1579916639.472:186): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16849 res=0 [ 567.264568][ T26] audit: type=1800 audit(1579916639.542:187): pid=12678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16849 res=0 01:44:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x62, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5523, 0x0) 01:44:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x100000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:44:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getgid() stat(0x0, 0x0) lstat(0x0, &(0x7f0000000280)) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:44:00 executing program 4: mlockall(0x1) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) clone(0x10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) [ 568.016412][T12689] FAT-fs (loop2): bogus number of reserved sectors [ 568.037807][T12689] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:00 executing program 0: 01:44:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/176, 0xb0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getgid() stat(0x0, 0x0) lstat(0x0, &(0x7f0000000280)) getegid() syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 01:44:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:00 executing program 0: 01:44:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 568.593364][T12707] FAT-fs (loop2): invalid media value (0x00) 01:44:00 executing program 0: [ 568.647668][T12707] FAT-fs (loop2): Can't find a valid FAT filesystem [ 568.656238][ T42] tipc: TX() has been purged, node left! 01:44:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:01 executing program 5: 01:44:01 executing program 3: 01:44:01 executing program 0: 01:44:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 569.423249][T12725] FAT-fs (loop2): invalid media value (0x00) [ 569.494853][T12725] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:02 executing program 4: 01:44:02 executing program 3: 01:44:02 executing program 0: 01:44:02 executing program 5: 01:44:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:02 executing program 3: [ 570.028606][T12742] FAT-fs (loop2): invalid media value (0x00) [ 570.061583][T12742] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:02 executing program 5: [ 570.742446][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.759345][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.777469][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.789386][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.806386][ T42] device bridge_slave_1 left promiscuous mode [ 570.812929][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.879989][ T42] device bridge_slave_0 left promiscuous mode [ 570.886669][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.943404][ T42] device veth1_macvtap left promiscuous mode [ 570.949818][ T42] device veth0_macvtap left promiscuous mode [ 570.956341][ T42] device veth1_vlan left promiscuous mode [ 570.962274][ T42] device veth0_vlan left promiscuous mode [ 572.119595][ T42] device hsr_slave_0 left promiscuous mode [ 572.179354][ T42] device hsr_slave_1 left promiscuous mode [ 572.241973][ T42] team0 (unregistering): Port device team_slave_1 removed [ 572.255385][ T42] team0 (unregistering): Port device team_slave_0 removed [ 572.267430][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.312465][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.375097][ T42] bond0 (unregistering): Released all slaves [ 572.506165][T12757] IPVS: ftp: loaded support on port[0] = 21 [ 572.562452][T12757] chnl_net:caif_netlink_parms(): no params data found [ 572.592492][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.600164][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.607948][T12757] device bridge_slave_0 entered promiscuous mode [ 572.615808][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.624899][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.633783][T12757] device bridge_slave_1 entered promiscuous mode [ 572.711281][T12757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.722415][T12757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.744261][T12757] team0: Port device team_slave_0 added [ 572.751735][T12757] team0: Port device team_slave_1 added [ 572.772539][T12757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.780486][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.807975][T12757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.821176][T12757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.828754][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.859281][T12757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.924736][T12757] device hsr_slave_0 entered promiscuous mode [ 572.980465][T12757] device hsr_slave_1 entered promiscuous mode [ 573.029228][T12757] debugfs: Directory 'hsr0' with parent '/' already present! [ 573.078573][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.086779][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.094248][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.101484][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.145472][T12757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.158409][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.167501][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.176381][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.188914][T12757] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.213469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.222932][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.230113][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.251858][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.261142][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.268273][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.285053][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.296332][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 573.310388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 573.326376][T12757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.340311][T12757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.357009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.366402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.374992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.392702][T12757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.400632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.408316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.490294][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.503808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.514495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.524166][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.532404][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.542688][T12757] device veth0_vlan entered promiscuous mode [ 573.557861][T12757] device veth1_vlan entered promiscuous mode [ 573.575484][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 573.584099][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 573.592976][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.602988][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.614909][T12757] device veth0_macvtap entered promiscuous mode [ 573.626037][T12757] device veth1_macvtap entered promiscuous mode [ 573.642323][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 573.655169][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.666658][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 573.677618][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.688070][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 573.699293][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.710625][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 573.722715][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.733316][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 573.745414][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.757074][T12757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.765820][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 573.774663][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 573.783609][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 573.793064][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 573.803588][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 573.814636][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.825215][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 573.836669][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.848021][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 573.859300][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.870597][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 573.881658][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.892546][T12757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 573.903226][T12757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.914563][T12757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.923482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 573.932757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.125297][ T26] audit: type=1800 audit(1579916646.402:188): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17313 res=0 [ 574.152669][ T26] audit: type=1800 audit(1579916646.432:189): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17313 res=0 [ 574.226280][ T26] audit: type=1800 audit(1579916646.502:190): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17313 res=0 01:44:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:07 executing program 5: 01:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2b0f000000000000000067000000040003000000000073c7ca1ea0f67048f7dfbaa6ab13c7249a71fa676edf1eb2398c3a5441b07b02ae1c7d16fb9f792ade90771f2ff42fcaff485aaa8173562d127a0104b0ee1c25884ae1645fa4b1cbb4c50d6722abdd25802df3919648be74d0bbfa6f"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 01:44:07 executing program 4: 01:44:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:07 executing program 3: 01:44:07 executing program 4: [ 574.940819][T12776] FAT-fs (loop2): invalid media value (0x00) [ 574.947191][T12776] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:07 executing program 3: 01:44:07 executing program 5: 01:44:07 executing program 4: 01:44:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:07 executing program 5: [ 575.292697][T12779] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 575.322567][T12781] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 01:44:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:07 executing program 3: [ 575.337926][ T8149] tipc: TX() has been purged, node left! 01:44:07 executing program 0: 01:44:07 executing program 4: 01:44:07 executing program 5: 01:44:07 executing program 3: [ 575.577396][T12799] FAT-fs (loop2): invalid media value (0x00) 01:44:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 575.655965][T12799] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:08 executing program 0: 01:44:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:08 executing program 3: 01:44:08 executing program 5: 01:44:08 executing program 4: 01:44:08 executing program 0: [ 576.244078][T12822] FAT-fs (loop2): invalid media value (0x00) 01:44:08 executing program 5: 01:44:08 executing program 3: [ 576.308300][T12822] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:08 executing program 4: 01:44:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:08 executing program 5: [ 576.896238][T12844] FAT-fs (loop2): invalid media value (0x00) [ 576.943505][T12844] FAT-fs (loop2): Can't find a valid FAT filesystem [ 577.096800][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.132623][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.153460][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.179241][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.197721][ T8149] device bridge_slave_1 left promiscuous mode [ 577.212991][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.283317][ T8149] device bridge_slave_0 left promiscuous mode [ 577.293276][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.363797][ T8149] device veth1_macvtap left promiscuous mode [ 577.379210][ T8149] device veth0_macvtap left promiscuous mode [ 577.385482][ T8149] device veth1_vlan left promiscuous mode [ 577.409373][ T8149] device veth0_vlan left promiscuous mode [ 578.619412][ T8149] device hsr_slave_0 left promiscuous mode [ 578.659355][ T8149] device hsr_slave_1 left promiscuous mode [ 578.721436][ T8149] team0 (unregistering): Port device team_slave_1 removed [ 578.732971][ T8149] team0 (unregistering): Port device team_slave_0 removed [ 578.744313][ T8149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.782589][ T8149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.862653][ T8149] bond0 (unregistering): Released all slaves [ 578.975873][T12853] IPVS: ftp: loaded support on port[0] = 21 [ 579.030825][T12853] chnl_net:caif_netlink_parms(): no params data found [ 579.061668][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.068825][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.077699][T12853] device bridge_slave_0 entered promiscuous mode [ 579.085677][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.093068][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.101838][T12853] device bridge_slave_1 entered promiscuous mode [ 579.171030][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.188178][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.214127][T12853] team0: Port device team_slave_0 added [ 579.223012][T12853] team0: Port device team_slave_1 added [ 579.245284][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.252821][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.282626][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.295108][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.306090][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.336724][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.421648][T12853] device hsr_slave_0 entered promiscuous mode [ 579.479629][T12853] device hsr_slave_1 entered promiscuous mode [ 579.539225][T12853] debugfs: Directory 'hsr0' with parent '/' already present! [ 579.585290][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.592738][T12853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.600300][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.607354][T12853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.644364][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.659097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.668436][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.677713][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.696859][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.713487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 579.723417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.731316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.750442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.759593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.766888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.776185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.787662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.796030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.810140][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.819424][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.830651][T12853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.847409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.855141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.867448][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.933513][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.948592][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.958736][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.971110][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.984264][T12853] device veth0_vlan entered promiscuous mode [ 579.994989][T12853] device veth1_vlan entered promiscuous mode [ 580.014493][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.023497][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.035685][T12853] device veth0_macvtap entered promiscuous mode [ 580.046376][T12853] device veth1_macvtap entered promiscuous mode [ 580.060839][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 580.072252][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.083362][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 580.094113][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.104420][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 580.115065][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.125412][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 580.136006][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.146335][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 580.157005][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.168084][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.176117][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.184801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.197806][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.207021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.217027][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 580.228420][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.238745][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 580.249347][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.259408][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 580.270025][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.279892][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 580.290467][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.300611][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 580.311281][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.322492][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.331206][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 580.340414][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 580.564065][ T26] audit: type=1800 audit(1579916652.842:191): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17398 res=0 [ 580.638032][ T26] audit: type=1800 audit(1579916652.912:192): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17398 res=0 01:44:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:13 executing program 0: 01:44:13 executing program 3: 01:44:13 executing program 4: 01:44:13 executing program 5: 01:44:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:13 executing program 3: 01:44:13 executing program 4: [ 581.398441][T12872] FAT-fs (loop2): invalid media value (0x00) 01:44:13 executing program 5: 01:44:13 executing program 0: [ 581.440003][T12872] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:13 executing program 3: 01:44:14 executing program 0: 01:44:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:14 executing program 5: 01:44:14 executing program 4: 01:44:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:14 executing program 3: 01:44:14 executing program 0: [ 582.076282][T12898] FAT-fs (loop2): invalid media value (0x00) [ 582.079249][ T9356] tipc: TX() has been purged, node left! 01:44:14 executing program 5: [ 582.146229][T12898] FAT-fs (loop2): Can't find a valid FAT filesystem 01:44:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:14 executing program 4: 01:44:14 executing program 3: 01:44:14 executing program 0: 01:44:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:14 executing program 4: 01:44:14 executing program 5: 01:44:15 executing program 3: 01:44:15 executing program 4: 01:44:15 executing program 0: 01:44:15 executing program 5: 01:44:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 583.722047][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.739302][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.757502][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.774322][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.792605][ T9356] device bridge_slave_1 left promiscuous mode [ 583.798984][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.879966][ T9356] device bridge_slave_0 left promiscuous mode [ 583.897711][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.953991][ T9356] device veth1_macvtap left promiscuous mode [ 583.970270][ T9356] device veth0_macvtap left promiscuous mode [ 583.976970][ T9356] device veth1_vlan left promiscuous mode [ 583.986832][ T9356] device veth0_vlan left promiscuous mode [ 585.133405][ T9356] device hsr_slave_0 left promiscuous mode [ 585.189356][ T9356] device hsr_slave_1 left promiscuous mode [ 585.241534][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 585.253294][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 585.263984][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.312685][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.392885][ T9356] bond0 (unregistering): Released all slaves [ 585.486468][T12946] IPVS: ftp: loaded support on port[0] = 21 [ 585.541413][T12946] chnl_net:caif_netlink_parms(): no params data found [ 585.619591][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.626719][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.635042][T12946] device bridge_slave_0 entered promiscuous mode [ 585.643377][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.651376][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.661423][T12946] device bridge_slave_1 entered promiscuous mode [ 585.681868][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.693788][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.715790][T12946] team0: Port device team_slave_0 added [ 585.722732][T12946] team0: Port device team_slave_1 added [ 585.741596][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.748680][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.775154][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.787554][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.795281][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.822065][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.901716][T12946] device hsr_slave_0 entered promiscuous mode [ 585.940683][T12946] device hsr_slave_1 entered promiscuous mode [ 586.000240][T12946] debugfs: Directory 'hsr0' with parent '/' already present! [ 586.053756][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.060872][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.068287][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.075612][T12946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.111162][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.125358][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.134548][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.142971][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.156542][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.169546][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.178391][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.185523][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.201728][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.210673][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.217693][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.237820][T12946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.248695][T12946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 586.261305][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.270798][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.280280][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.288982][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.297535][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 586.305512][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.338875][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 586.346882][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.361327][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.420689][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.434281][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.443704][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.452245][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.462500][T12946] device veth0_vlan entered promiscuous mode [ 586.474374][T12946] device veth1_vlan entered promiscuous mode [ 586.492844][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 586.501707][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 586.510892][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 586.522167][T12946] device veth0_macvtap entered promiscuous mode [ 586.532996][T12946] device veth1_macvtap entered promiscuous mode [ 586.546672][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.557678][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.567726][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.578357][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.588508][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.599761][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.610279][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.621782][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.632145][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 586.643255][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.654754][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.663357][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.672361][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.682608][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.693457][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.704445][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.715535][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.725812][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.736856][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.746769][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.757721][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.767703][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 586.778568][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.789800][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.798381][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.807482][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.013561][ T26] audit: type=1800 audit(1579916659.292:193): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17421 res=0 [ 587.149722][ T26] audit: type=1800 audit(1579916659.432:194): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17421 res=0 [ 587.220116][ T26] audit: type=1800 audit(1579916659.502:195): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17421 res=0 [ 587.649881][ T0] NOHZ: local_softirq_pending 08 01:44:20 executing program 0: 01:44:20 executing program 4: 01:44:20 executing program 3: 01:44:20 executing program 5: 01:44:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:20 executing program 4: 01:44:20 executing program 3: 01:44:20 executing program 0: 01:44:20 executing program 5: 01:44:20 executing program 4: 01:44:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:20 executing program 5: 01:44:20 executing program 3: 01:44:20 executing program 0: 01:44:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:20 executing program 4: [ 588.350474][ T8114] tipc: TX() has been purged, node left! 01:44:20 executing program 3: 01:44:20 executing program 0: 01:44:20 executing program 5: 01:44:20 executing program 4: 01:44:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:21 executing program 3: 01:44:21 executing program 5: 01:44:21 executing program 4: 01:44:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:21 executing program 0: 01:44:21 executing program 3: 01:44:21 executing program 4: 01:44:21 executing program 5: 01:44:21 executing program 0: 01:44:21 executing program 4: 01:44:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 590.212191][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.229248][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.243313][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.269251][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.283801][ T8114] device bridge_slave_1 left promiscuous mode [ 590.300051][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.349978][ T8114] device bridge_slave_0 left promiscuous mode [ 590.356258][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.417407][ T8114] device veth1_macvtap left promiscuous mode [ 590.432584][ T8114] device veth0_macvtap left promiscuous mode [ 590.459241][ T8114] device veth1_vlan left promiscuous mode [ 590.465074][ T8114] device veth0_vlan left promiscuous mode [ 591.669511][ T8114] device hsr_slave_0 left promiscuous mode [ 591.709256][ T8114] device hsr_slave_1 left promiscuous mode [ 591.771501][ T8114] team0 (unregistering): Port device team_slave_1 removed [ 591.783947][ T8114] team0 (unregistering): Port device team_slave_0 removed [ 591.795045][ T8114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.852929][ T8114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.953273][ T8114] bond0 (unregistering): Released all slaves [ 592.046415][T13042] IPVS: ftp: loaded support on port[0] = 21 [ 592.100543][T13042] chnl_net:caif_netlink_parms(): no params data found [ 592.129207][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.136390][T13042] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.145736][T13042] device bridge_slave_0 entered promiscuous mode [ 592.209287][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.216524][T13042] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.224412][T13042] device bridge_slave_1 entered promiscuous mode [ 592.244781][T13042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.256119][T13042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.275817][T13042] team0: Port device team_slave_0 added [ 592.282601][T13042] team0: Port device team_slave_1 added [ 592.300171][T13042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.307202][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.333277][T13042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.345454][T13042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.352815][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.380012][T13042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.452005][T13042] device hsr_slave_0 entered promiscuous mode [ 592.489533][T13042] device hsr_slave_1 entered promiscuous mode [ 592.542524][T13042] debugfs: Directory 'hsr0' with parent '/' already present! [ 592.588960][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.596197][T13042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.603563][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.610690][T13042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.658363][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.673011][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.682068][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.690826][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.704937][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.718313][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.727591][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.734714][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.756914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.765834][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.772938][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.783608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 592.801786][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.810373][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 592.819354][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.827893][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.838307][T13042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.856578][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.864526][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.875888][T13042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.934264][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 592.953693][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 592.962918][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.970851][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.980724][T13042] device veth0_vlan entered promiscuous mode [ 592.991840][T13042] device veth1_vlan entered promiscuous mode [ 593.010449][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 593.018987][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 593.028145][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.038932][T13042] device veth0_macvtap entered promiscuous mode [ 593.050069][T13042] device veth1_macvtap entered promiscuous mode [ 593.062005][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.074944][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 593.085800][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.095739][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 593.106406][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.116997][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 593.127744][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.137701][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 593.148653][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.158529][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 593.169065][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.180942][T13042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.193232][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 593.202268][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 593.212912][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 593.223529][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.233651][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 593.244306][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.254194][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 593.264671][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.275097][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 593.285554][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.295971][T13042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 593.306963][T13042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.318022][T13042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.326486][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.335901][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 593.566182][ T26] audit: type=1800 audit(1579916665.842:196): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17452 res=0 [ 593.695473][ T26] audit: type=1800 audit(1579916665.972:197): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17452 res=0 [ 593.765462][ T26] audit: type=1800 audit(1579916666.042:198): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17452 res=0 01:44:26 executing program 5: 01:44:26 executing program 3: 01:44:26 executing program 0: 01:44:26 executing program 4: 01:44:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:26 executing program 0: 01:44:26 executing program 3: 01:44:26 executing program 5: 01:44:26 executing program 3: 01:44:26 executing program 5: 01:44:26 executing program 4: 01:44:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:27 executing program 0: [ 594.850691][ T9356] tipc: TX() has been purged, node left! 01:44:27 executing program 3: 01:44:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:27 executing program 5: 01:44:27 executing program 0: 01:44:27 executing program 4: 01:44:27 executing program 0: 01:44:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:27 executing program 3: 01:44:27 executing program 5: 01:44:27 executing program 4: 01:44:27 executing program 0: 01:44:28 executing program 3: 01:44:28 executing program 5: [ 596.642525][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.662633][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.673285][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.681490][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.689972][ T9356] device bridge_slave_1 left promiscuous mode [ 596.696289][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.779911][ T9356] device bridge_slave_0 left promiscuous mode [ 596.786297][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.842857][ T9356] device veth1_macvtap left promiscuous mode [ 596.848975][ T9356] device veth0_macvtap left promiscuous mode [ 596.855080][ T9356] device veth1_vlan left promiscuous mode [ 596.860953][ T9356] device veth0_vlan left promiscuous mode [ 598.009483][ T9356] device hsr_slave_0 left promiscuous mode [ 598.059344][ T9356] device hsr_slave_1 left promiscuous mode [ 598.122126][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 598.132996][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 598.143501][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.202821][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.264063][ T9356] bond0 (unregistering): Released all slaves [ 598.346352][T13124] IPVS: ftp: loaded support on port[0] = 21 [ 598.401605][T13124] chnl_net:caif_netlink_parms(): no params data found [ 598.505412][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.515636][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.523826][T13124] device bridge_slave_0 entered promiscuous mode [ 598.535775][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.544173][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.555829][T13124] device bridge_slave_1 entered promiscuous mode [ 598.578530][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.592656][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.619623][T13124] team0: Port device team_slave_0 added [ 598.626524][T13124] team0: Port device team_slave_1 added [ 598.647507][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.657511][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.686909][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.703653][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.710977][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.741357][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.803142][T13124] device hsr_slave_0 entered promiscuous mode [ 598.852022][T13124] device hsr_slave_1 entered promiscuous mode [ 598.890714][T13124] debugfs: Directory 'hsr0' with parent '/' already present! [ 598.937224][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.944534][T13124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.952260][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.959601][T13124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.996453][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.010261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.020035][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.028206][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.043374][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.055563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.064494][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.071612][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.092211][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.102008][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.109473][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.118919][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.137650][T13124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.148648][T13124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.161702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.170755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.183151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.192302][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 599.212079][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.224030][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.232623][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.246889][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.302729][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.319080][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.329753][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 599.337806][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.348156][T13124] device veth0_vlan entered promiscuous mode [ 599.359840][T13124] device veth1_vlan entered promiscuous mode [ 599.377053][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 599.385923][T10154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 599.397261][T13124] device veth0_macvtap entered promiscuous mode [ 599.406795][T13124] device veth1_macvtap entered promiscuous mode [ 599.423565][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 599.434243][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.444428][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 599.455034][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.465329][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 599.476003][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.486010][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 599.496580][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.506690][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 599.517312][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.529035][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.537642][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 599.546329][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 599.554947][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 599.563936][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 599.574385][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 599.585643][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.596040][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 599.606930][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.617037][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 599.627704][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.637851][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 599.649079][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.660114][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 599.671770][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.682976][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.691829][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.702222][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 599.922882][ T26] audit: type=1800 audit(1579916672.202:199): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17481 res=0 [ 600.055061][ T26] audit: type=1800 audit(1579916672.332:200): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17481 res=0 [ 600.127735][ T26] audit: type=1800 audit(1579916672.402:201): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17481 res=0 01:44:32 executing program 4: 01:44:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:32 executing program 0: 01:44:32 executing program 3: 01:44:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:32 executing program 5: 01:44:33 executing program 3: 01:44:33 executing program 5: 01:44:33 executing program 4: 01:44:33 executing program 0: 01:44:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:33 executing program 3: 01:44:33 executing program 4: 01:44:33 executing program 0: 01:44:33 executing program 5: 01:44:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:33 executing program 3: 01:44:33 executing program 5: 01:44:33 executing program 4: [ 601.419205][ T9356] tipc: TX() has been purged, node left! 01:44:33 executing program 0: 01:44:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 602.071900][ T26] audit: type=1800 audit(1579916674.352:202): pid=13196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17495 res=0 [ 602.498206][ T26] audit: type=1800 audit(1579916674.432:203): pid=13201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17501 res=0 [ 602.540958][ T26] audit: type=1800 audit(1579916674.442:204): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17502 res=0 01:44:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 602.574256][ T26] audit: type=1800 audit(1579916674.502:205): pid=13196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17495 res=0 [ 602.594919][ T26] audit: type=1800 audit(1579916674.602:206): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17504 res=0 [ 602.616023][ T26] audit: type=1800 audit(1579916674.612:207): pid=13201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17501 res=0 [ 602.692817][ T26] audit: type=1800 audit(1579916674.612:208): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17495 res=0 01:44:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 603.832254][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.846672][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.855852][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.874576][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.894011][ T9356] device bridge_slave_1 left promiscuous mode [ 603.911105][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.949989][ T9356] device bridge_slave_0 left promiscuous mode [ 603.956367][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.013594][ T9356] device veth1_macvtap left promiscuous mode [ 604.019775][ T9356] device veth0_macvtap left promiscuous mode [ 604.026047][ T9356] device veth1_vlan left promiscuous mode [ 604.031858][ T9356] device veth0_vlan left promiscuous mode [ 605.169679][ T9356] device hsr_slave_0 left promiscuous mode [ 605.219359][ T9356] device hsr_slave_1 left promiscuous mode [ 605.291866][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 605.303093][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 605.313885][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.353761][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.433572][ T9356] bond0 (unregistering): Released all slaves [ 605.516382][T13229] IPVS: ftp: loaded support on port[0] = 21 [ 605.582369][T13229] chnl_net:caif_netlink_parms(): no params data found [ 605.673050][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.683410][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.691717][T13229] device bridge_slave_0 entered promiscuous mode [ 605.703592][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.711273][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.719948][T13229] device bridge_slave_1 entered promiscuous mode [ 605.752989][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.764707][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.793883][T13229] team0: Port device team_slave_0 added [ 605.801434][T13229] team0: Port device team_slave_1 added [ 605.824075][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.834256][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.864989][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.877988][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.888750][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.920139][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.001556][T13229] device hsr_slave_0 entered promiscuous mode [ 606.059683][T13229] device hsr_slave_1 entered promiscuous mode [ 606.109237][T13229] debugfs: Directory 'hsr0' with parent '/' already present! [ 606.150879][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.158251][T13229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.165651][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.172880][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.208622][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.222059][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.231406][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.239995][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.254424][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.266890][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.276890][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.284022][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.313977][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.323019][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.330211][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.340694][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.349818][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.358867][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.367526][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.377963][T13229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.387558][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.406620][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.414661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.423342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.480351][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 606.490408][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.499659][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.507766][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.545778][T13229] device veth0_vlan entered promiscuous mode [ 606.557177][T13229] device veth1_vlan entered promiscuous mode [ 606.574731][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.583600][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.621024][T13229] device veth0_macvtap entered promiscuous mode [ 606.630522][T13229] device veth1_macvtap entered promiscuous mode [ 606.644262][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 606.655096][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.665283][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 606.676494][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.686395][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 606.697092][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.707586][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 606.718459][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.732334][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 606.742830][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.754056][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.763198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.771799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 606.780272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.789003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.824629][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 606.835597][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.845656][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 606.856481][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.866472][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 606.877159][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.887148][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 606.897648][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.907703][T13229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 606.918678][T13229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.930983][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.939017][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 606.948605][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.183081][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 607.183099][ T26] audit: type=1800 audit(1579916679.462:214): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17514 res=0 [ 607.286642][ T26] audit: type=1800 audit(1579916679.562:215): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17514 res=0 [ 607.426540][ T26] audit: type=1800 audit(1579916679.642:216): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17514 res=0 01:44:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 608.364160][ T26] audit: type=1800 audit(1579916680.642:217): pid=13299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17475 res=0 [ 608.660967][ T26] audit: type=1800 audit(1579916680.772:218): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17475 res=0 01:44:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 608.907904][ T26] audit: type=1800 audit(1579916680.832:219): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17475 res=0 01:44:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 609.570473][ T26] audit: type=1800 audit(1579916681.852:220): pid=13315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17498 res=0 01:44:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 609.768300][ T26] audit: type=1800 audit(1579916681.982:221): pid=13315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17498 res=0 [ 609.809320][ T9356] tipc: TX() has been purged, node left! [ 610.002856][ T26] audit: type=1800 audit(1579916682.032:222): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17498 res=0 [ 610.058802][ T9356] tipc: TX() has been purged, node left! [ 610.239183][ T9356] tipc: TX() has been purged, node left! 01:44:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 610.449208][ T9356] tipc: TX() has been purged, node left! 01:44:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 611.102025][ T26] audit: type=1800 audit(1579916683.382:223): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17523 res=0 01:44:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {0x0}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:44:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:44:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {0x0}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 612.428957][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 612.428980][ T26] audit: type=1800 audit(1579916684.702:226): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17526 res=0 [ 612.692881][ T26] audit: type=1800 audit(1579916684.822:227): pid=13379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17526 res=0 [ 612.833078][ T26] audit: type=1800 audit(1579916684.892:228): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=17526 res=0 [ 614.333995][T13402] IPVS: ftp: loaded support on port[0] = 21 [ 614.516522][T13402] chnl_net:caif_netlink_parms(): no params data found [ 614.546815][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.554947][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.563659][T13402] device bridge_slave_0 entered promiscuous mode [ 614.673549][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.681197][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.689956][T13402] device bridge_slave_1 entered promiscuous mode [ 614.809437][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.823399][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.946918][T13402] team0: Port device team_slave_0 added [ 614.957265][T13402] team0: Port device team_slave_1 added [ 615.075803][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.085810][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.114477][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.129206][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.137980][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.171856][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.192412][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.202410][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.212354][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.224512][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.235021][ T9356] device bridge_slave_1 left promiscuous mode [ 615.241995][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.299813][ T9356] device bridge_slave_0 left promiscuous mode [ 615.306901][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.363758][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.375903][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.399530][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.412002][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.423976][ T9356] device bridge_slave_1 left promiscuous mode [ 615.449037][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.529878][ T9356] device bridge_slave_0 left promiscuous mode [ 615.538098][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.583495][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.593762][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.604895][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.613564][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.626094][ T9356] device bridge_slave_1 left promiscuous mode [ 615.637055][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.679994][ T9356] device bridge_slave_0 left promiscuous mode [ 615.686633][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.752656][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.761268][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.770202][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.778782][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.792325][ T9356] device bridge_slave_1 left promiscuous mode [ 615.799477][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.849745][ T9356] device bridge_slave_0 left promiscuous mode [ 615.856851][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.898349][ T9356] device veth1_macvtap left promiscuous mode [ 615.906063][ T9356] device veth0_macvtap left promiscuous mode [ 615.912891][ T9356] device veth1_vlan left promiscuous mode [ 615.919644][ T9356] device veth0_vlan left promiscuous mode [ 615.925781][ T9356] device veth1_macvtap left promiscuous mode [ 615.936069][ T9356] device veth0_macvtap left promiscuous mode [ 615.942299][ T9356] device veth1_vlan left promiscuous mode [ 615.951921][ T9356] device veth0_vlan left promiscuous mode [ 615.960806][ T9356] device veth1_macvtap left promiscuous mode [ 615.968426][ T9356] device veth0_macvtap left promiscuous mode [ 615.975345][ T9356] device veth1_vlan left promiscuous mode [ 615.982083][ T9356] device veth0_vlan left promiscuous mode [ 615.988674][ T9356] device veth1_macvtap left promiscuous mode [ 615.994876][ T9356] device veth0_macvtap left promiscuous mode [ 616.001963][ T9356] device veth1_vlan left promiscuous mode [ 616.009466][ T9356] device veth0_vlan left promiscuous mode [ 620.319695][ T9356] device hsr_slave_0 left promiscuous mode [ 620.359407][ T9356] device hsr_slave_1 left promiscuous mode [ 620.412880][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 620.426121][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 620.438086][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.503222][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.573853][ T9356] bond0 (unregistering): Released all slaves [ 620.769661][ T9356] device hsr_slave_0 left promiscuous mode [ 620.809399][ T9356] device hsr_slave_1 left promiscuous mode [ 620.872106][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 620.886157][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 620.898174][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.952962][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.067117][ T9356] bond0 (unregistering): Released all slaves [ 621.259497][ T9356] device hsr_slave_0 left promiscuous mode [ 621.329466][ T9356] device hsr_slave_1 left promiscuous mode [ 621.381629][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 621.395206][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 621.408308][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.463258][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.543991][ T9356] bond0 (unregistering): Released all slaves [ 621.769700][ T9356] device hsr_slave_0 left promiscuous mode [ 621.819480][ T9356] device hsr_slave_1 left promiscuous mode [ 621.873805][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 621.889448][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 621.901007][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.943787][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.024117][ T9356] bond0 (unregistering): Released all slaves [ 622.119089][T13408] IPVS: ftp: loaded support on port[0] = 21 [ 622.120071][T13409] IPVS: ftp: loaded support on port[0] = 21 [ 622.161344][T13402] device hsr_slave_0 entered promiscuous mode [ 622.209813][T13402] device hsr_slave_1 entered promiscuous mode [ 622.294380][T13407] IPVS: ftp: loaded support on port[0] = 21 [ 622.472021][T13408] chnl_net:caif_netlink_parms(): no params data found [ 622.533050][T13409] chnl_net:caif_netlink_parms(): no params data found [ 622.554025][T13407] chnl_net:caif_netlink_parms(): no params data found [ 622.583416][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.590841][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.598806][T13408] device bridge_slave_0 entered promiscuous mode [ 622.607408][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.614723][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.623114][T13408] device bridge_slave_1 entered promiscuous mode [ 622.653145][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.660734][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.668775][T13409] device bridge_slave_0 entered promiscuous mode [ 622.692095][T13408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.704123][T13408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.713899][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.721738][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.729841][T13409] device bridge_slave_1 entered promiscuous mode [ 622.746942][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.754509][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.762568][T13407] device bridge_slave_0 entered promiscuous mode [ 622.781247][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.788433][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.796592][T13407] device bridge_slave_1 entered promiscuous mode [ 622.820712][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.836554][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.848086][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.861013][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.873470][T13408] team0: Port device team_slave_0 added [ 622.880755][T13408] team0: Port device team_slave_1 added [ 622.909969][T13409] team0: Port device team_slave_0 added [ 622.917182][T13409] team0: Port device team_slave_1 added [ 622.939583][T13408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.946711][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.973138][T13408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.020230][T13407] team0: Port device team_slave_0 added [ 623.028374][T13407] team0: Port device team_slave_1 added [ 623.041920][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.049890][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.076899][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.088399][T13408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.095863][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.123450][T13408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.240101][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.247279][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.274215][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.349705][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.356831][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.387880][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.404266][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.424413][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.432004][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.459094][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.521603][T13408] device hsr_slave_0 entered promiscuous mode [ 623.619644][T13408] device hsr_slave_1 entered promiscuous mode [ 623.679240][T13408] debugfs: Directory 'hsr0' with parent '/' already present! [ 623.698461][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.726234][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.735875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.790918][T13409] device hsr_slave_0 entered promiscuous mode [ 623.839669][T13409] device hsr_slave_1 entered promiscuous mode [ 623.879294][T13409] debugfs: Directory 'hsr0' with parent '/' already present! [ 623.932017][T13407] device hsr_slave_0 entered promiscuous mode [ 623.989549][T13407] device hsr_slave_1 entered promiscuous mode [ 624.029326][T13407] debugfs: Directory 'hsr0' with parent '/' already present! [ 624.051134][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.060337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.068848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.076124][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.086889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.133999][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.142652][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.154637][T13413] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.161769][T13413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.170501][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.180209][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.189533][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.198244][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.208168][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.251503][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.262513][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.271697][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.281299][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.313289][T13402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.338865][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.347967][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.388787][T13402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.405091][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.413428][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.479814][T13407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.517418][T13408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.527366][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.539922][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.552420][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.563105][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.591057][T13408] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.616213][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.625196][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.634822][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.644091][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.654782][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.662909][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.672195][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.680862][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.688045][T13419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.696661][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.705545][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.714605][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.721953][T13419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.730279][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.739617][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.748759][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.757403][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.766444][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.774677][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.796616][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.804749][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.813440][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.822270][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.831288][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.841598][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.850419][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.858024][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.866098][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.875226][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.883798][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.890856][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.898680][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.907681][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.916791][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.925552][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.934504][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.941565][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.949607][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.958670][T13402] device veth0_vlan entered promiscuous mode [ 624.980094][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.987957][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.997149][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.005740][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.014053][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.023639][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.032302][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.041760][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.050207][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.057876][T13419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.066046][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.075194][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.084639][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.093906][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.102765][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.111992][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.121141][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.130012][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.138834][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.148627][T13402] device veth1_vlan entered promiscuous mode [ 625.164792][T13409] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.176103][T13409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.192880][T13408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.204372][T13408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.216092][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 625.224664][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.232891][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.241258][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.250303][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.258743][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.267535][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.276257][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.284680][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.293576][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.302890][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.311578][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.320600][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.329757][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.338164][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.347412][T13407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.365015][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 625.373519][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.381270][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.395408][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.412455][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.420780][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.433109][T13402] device veth0_macvtap entered promiscuous mode [ 625.447832][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.455699][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 625.465935][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 625.475566][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.486553][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.500825][T13408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.509063][T13402] device veth1_macvtap entered promiscuous mode [ 625.516245][ T9356] tipc: TX() has been purged, node left! [ 625.522497][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 625.534606][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 625.552789][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.560980][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.573050][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 625.585016][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.596345][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 625.608926][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.620381][T13402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.705581][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.714678][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.724834][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 625.735791][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.746452][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 625.757853][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.769069][T13402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.785618][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.798902][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 625.849951][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.858861][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.880381][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.890147][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.948848][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.957953][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.975548][T13407] device veth0_vlan entered promiscuous mode [ 625.984064][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.994609][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.019565][ T26] audit: type=1800 audit(1579916698.292:229): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16529 res=0 [ 626.056315][T13409] device veth0_vlan entered promiscuous mode [ 626.065919][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.075390][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.083822][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.094077][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.104014][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.112971][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.171815][ T26] audit: type=1800 audit(1579916698.452:230): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16529 res=0 [ 626.205505][T13407] device veth1_vlan entered promiscuous mode [ 626.215688][T13408] device veth0_vlan entered promiscuous mode [ 626.223596][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.232143][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.241098][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.251095][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.259924][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.274776][ T26] audit: type=1800 audit(1579916698.552:231): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16529 res=0 [ 626.306152][T13409] device veth1_vlan entered promiscuous mode [ 626.350159][T13408] device veth1_vlan entered promiscuous mode [ 626.372410][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.382971][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.392445][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.400759][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.409056][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.455318][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.466179][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.475132][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.487586][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.503441][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.512484][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.522805][T13408] device veth0_macvtap entered promiscuous mode [ 626.531180][T13409] device veth0_macvtap entered promiscuous mode [ 626.541213][T13407] device veth0_macvtap entered promiscuous mode [ 626.578835][T13408] device veth1_macvtap entered promiscuous mode [ 626.588557][T13409] device veth1_macvtap entered promiscuous mode [ 626.601922][T13407] device veth1_macvtap entered promiscuous mode [ 626.614197][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.625242][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.636578][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.647696][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.658712][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.669329][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.680760][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.743775][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.753409][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.763596][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.779984][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.788417][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.798266][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.808063][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.817612][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.828396][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.842050][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.852607][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.863375][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.873334][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 626.884076][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.895636][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.904928][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.915815][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.929519][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.940364][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.950730][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.962060][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.972322][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 626.983201][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.994280][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.007393][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.015130][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.023320][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.031154][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.039713][ T9356] device bridge_slave_1 left promiscuous mode [ 627.046152][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.090108][ T9356] device bridge_slave_0 left promiscuous mode [ 627.096393][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.152562][ T9356] device veth1_macvtap left promiscuous mode [ 627.158832][ T9356] device veth0_macvtap left promiscuous mode [ 627.165191][ T9356] device veth1_vlan left promiscuous mode [ 627.171609][ T9356] device veth0_vlan left promiscuous mode [ 628.299594][ T9356] device hsr_slave_0 left promiscuous mode [ 628.379318][ T9356] device hsr_slave_1 left promiscuous mode [ 628.452178][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 628.463346][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 628.474766][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.513545][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.583287][ T9356] bond0 (unregistering): Released all slaves [ 628.731888][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.741206][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.750427][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.761390][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.780257][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 628.791520][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.805632][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 628.816705][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.829203][T13407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 628.840200][T13407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.860155][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.891797][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 628.904478][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.918677][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 628.933341][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.944517][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 628.958457][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.973100][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 628.984870][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.999348][T13408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.009829][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.018637][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.027660][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.037458][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.057199][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 01:45:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {0x0}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 629.089397][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.099997][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 629.110726][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.120847][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 629.131653][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.141739][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 629.152202][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.163683][T13408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.174625][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.184643][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.422547][ T26] audit: type=1800 audit(1579916701.692:232): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16689 res=0 [ 629.606787][ T26] audit: type=1800 audit(1579916701.692:233): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16705 res=0 [ 629.716624][ T26] audit: type=1800 audit(1579916701.822:234): pid=13482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16689 res=0 01:45:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e50e", 0x1b}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 629.794441][ T26] audit: type=1800 audit(1579916701.862:235): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16705 res=0 [ 629.842604][ T26] audit: type=1800 audit(1579916701.922:236): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16705 res=0 [ 629.885284][ T26] audit: type=1800 audit(1579916701.942:237): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16689 res=0 01:45:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 01:45:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 630.447176][ T26] audit: type=1800 audit(1579916702.722:238): pid=13502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16545 res=0 01:45:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 01:45:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 01:45:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) [ 631.400136][ T9356] tipc: TX() has been purged, node left! [ 631.458580][ T9356] tipc: TX() has been purged, node left! [ 631.474424][ T9356] tipc: TX() has been purged, node left! [ 632.733237][T13519] IPVS: ftp: loaded support on port[0] = 21 [ 632.859928][T13519] chnl_net:caif_netlink_parms(): no params data found [ 632.889051][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.906145][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.914129][T13519] device bridge_slave_0 entered promiscuous mode [ 632.992900][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.000141][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.008067][T13519] device bridge_slave_1 entered promiscuous mode [ 633.026258][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.089904][ T0] NOHZ: local_softirq_pending 08 [ 633.111455][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.131107][T13519] team0: Port device team_slave_0 added [ 633.138410][T13519] team0: Port device team_slave_1 added [ 633.147027][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.155912][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.164293][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.173067][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.182486][ T9356] device bridge_slave_1 left promiscuous mode [ 633.189019][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.229962][ T9356] device bridge_slave_0 left promiscuous mode [ 633.236285][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.293125][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.301226][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.309077][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.317022][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.324907][ T9356] device bridge_slave_1 left promiscuous mode [ 633.331851][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.389893][ T9356] device bridge_slave_0 left promiscuous mode [ 633.396397][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.452711][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.469329][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.482016][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.499318][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.516339][ T9356] device bridge_slave_1 left promiscuous mode [ 633.539306][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.579735][ T9356] device bridge_slave_0 left promiscuous mode [ 633.586014][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.656733][ T9356] device veth1_macvtap left promiscuous mode [ 633.662863][ T9356] device veth0_macvtap left promiscuous mode [ 633.669194][ T9356] device veth1_vlan left promiscuous mode [ 633.675049][ T9356] device veth0_vlan left promiscuous mode [ 633.681485][ T9356] device veth1_macvtap left promiscuous mode [ 633.687657][ T9356] device veth0_macvtap left promiscuous mode [ 633.694013][ T9356] device veth1_vlan left promiscuous mode [ 633.699929][ T9356] device veth0_vlan left promiscuous mode [ 633.705971][ T9356] device veth1_macvtap left promiscuous mode [ 633.712065][ T9356] device veth0_macvtap left promiscuous mode [ 633.718185][ T9356] device veth1_vlan left promiscuous mode [ 633.724310][ T9356] device veth0_vlan left promiscuous mode [ 636.799735][ T9356] device hsr_slave_0 left promiscuous mode [ 636.859382][ T9356] device hsr_slave_1 left promiscuous mode [ 636.911264][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 636.923986][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 636.934544][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.973064][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.072673][ T9356] bond0 (unregistering): Released all slaves [ 637.359438][ T9356] device hsr_slave_0 left promiscuous mode [ 637.429307][ T9356] device hsr_slave_1 left promiscuous mode [ 637.482055][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 637.493887][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 637.505422][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.562460][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.632300][ T9356] bond0 (unregistering): Released all slaves [ 637.829639][ T9356] device hsr_slave_0 left promiscuous mode [ 637.889379][ T9356] device hsr_slave_1 left promiscuous mode [ 637.961048][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 637.972265][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 637.982428][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.022577][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.091737][ T9356] bond0 (unregistering): Released all slaves [ 638.196117][T13525] IPVS: ftp: loaded support on port[0] = 21 [ 638.196137][T13526] IPVS: ftp: loaded support on port[0] = 21 [ 638.204145][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.216761][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.243225][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.264747][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.271941][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.298493][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.321657][T13524] IPVS: ftp: loaded support on port[0] = 21 [ 638.391117][T13519] device hsr_slave_0 entered promiscuous mode [ 638.459557][T13519] device hsr_slave_1 entered promiscuous mode [ 638.681898][T13526] chnl_net:caif_netlink_parms(): no params data found [ 638.736786][T13526] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.744358][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.753039][T13526] device bridge_slave_0 entered promiscuous mode [ 638.782825][T13526] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.790275][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.798554][T13526] device bridge_slave_1 entered promiscuous mode [ 638.805549][T13525] chnl_net:caif_netlink_parms(): no params data found [ 638.848854][T13524] chnl_net:caif_netlink_parms(): no params data found [ 638.863200][T13526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.889745][T13526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.906154][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.913674][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.921956][T13525] device bridge_slave_0 entered promiscuous mode [ 638.954200][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.961470][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.969793][T13525] device bridge_slave_1 entered promiscuous mode [ 638.976749][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.984001][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.992016][T13524] device bridge_slave_0 entered promiscuous mode [ 639.003881][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.010994][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.018946][T13524] device bridge_slave_1 entered promiscuous mode [ 639.036739][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.047092][T13526] team0: Port device team_slave_0 added [ 639.054458][T13526] team0: Port device team_slave_1 added [ 639.150781][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.174858][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.249855][T13526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.256980][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.284476][T13526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.300699][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.311867][T13525] team0: Port device team_slave_0 added [ 639.318023][T13526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.326205][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.352755][T13526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.375463][T13525] team0: Port device team_slave_1 added [ 639.401756][T13519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.426935][T13524] team0: Port device team_slave_0 added [ 639.438810][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.492074][T13526] device hsr_slave_0 entered promiscuous mode [ 639.539637][T13526] device hsr_slave_1 entered promiscuous mode [ 639.602145][T13526] debugfs: Directory 'hsr0' with parent '/' already present! [ 639.610716][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.618947][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.631415][T13524] team0: Port device team_slave_1 added [ 639.637518][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.647856][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.676186][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.711728][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.720694][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.729702][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.736770][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.744837][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.753752][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.762129][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.769261][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.778500][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.787191][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.796488][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.824746][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.838367][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.849908][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.879247][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.892572][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.899673][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.926974][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.991137][T13525] device hsr_slave_0 entered promiscuous mode [ 640.039677][T13525] device hsr_slave_1 entered promiscuous mode [ 640.099252][T13525] debugfs: Directory 'hsr0' with parent '/' already present! [ 640.107067][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.147025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 640.201737][T13524] device hsr_slave_0 entered promiscuous mode [ 640.239683][T13524] device hsr_slave_1 entered promiscuous mode [ 640.279277][T13524] debugfs: Directory 'hsr0' with parent '/' already present! [ 640.296976][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 640.308221][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 640.327738][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 640.347145][T13519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 640.358024][T13519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 640.389676][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 640.399650][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 640.408698][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.417792][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 640.427045][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 640.438278][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.447302][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 640.474678][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.485504][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.556749][T13519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.603641][T13526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.616564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 640.625408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.650386][T13526] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.664207][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.673259][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.682537][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.689727][T13417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.708674][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.717522][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.726321][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.735264][T13416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.744542][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.751863][T13416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.772299][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.782652][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 640.791351][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.799841][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.808824][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.842578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.852389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 640.861941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 640.874013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 640.883398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 640.892253][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 640.901645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.910358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.918849][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.926096][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.934407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.943512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.952025][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.959266][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.967312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.976461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 640.985838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.994547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.004387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.012898][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.037000][T13519] device veth0_vlan entered promiscuous mode [ 641.052202][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.061078][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.069954][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 641.078738][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 641.087614][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.096191][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.104998][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.115044][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.123146][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.136453][T13526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.148108][T13526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.156346][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.165483][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.174325][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 641.183159][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.195480][T13525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.207179][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.222357][T13519] device veth1_vlan entered promiscuous mode [ 641.237595][T13526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.245755][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 641.254623][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.263728][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.272519][ T9356] tipc: TX() has been purged, node left! [ 641.272629][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.286083][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.303673][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.385961][T13524] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.394054][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 641.402558][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.410722][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.418577][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 641.427037][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.440423][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.494740][T13519] device veth0_macvtap entered promiscuous mode [ 641.502156][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.510998][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.520654][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 641.529543][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.538246][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.545719][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.554155][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.563204][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.572233][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.579346][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.587268][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.596716][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.607410][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 641.616132][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.631895][T13519] device veth1_macvtap entered promiscuous mode [ 641.676732][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.685326][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.694584][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.703718][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.723812][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.733302][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.742465][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 641.752940][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 641.792517][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 641.803046][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.813435][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 641.824036][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.835248][T13519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.864043][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.872902][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.882782][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.891944][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.901323][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.910158][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.919234][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.927471][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.962028][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 641.973322][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.983720][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 641.994426][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.005676][T13519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.015355][T13526] device veth0_vlan entered promiscuous mode [ 642.026380][T13525] device veth0_vlan entered promiscuous mode [ 642.033530][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.044895][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.053655][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.064067][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.072162][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.081049][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.090063][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.098631][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.145248][T13526] device veth1_vlan entered promiscuous mode [ 642.153915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 642.162584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.171660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.182146][T13524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 642.196019][T13525] device veth1_vlan entered promiscuous mode [ 642.253673][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 642.262678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.271193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.279784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.288674][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.302808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.312888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.328530][T13525] device veth0_macvtap entered promiscuous mode [ 642.351070][T13526] device veth0_macvtap entered promiscuous mode [ 642.401797][T13525] device veth1_macvtap entered promiscuous mode [ 642.415634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.424176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.433195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.443556][T13526] device veth1_macvtap entered promiscuous mode [ 642.484655][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.494914][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.511688][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 642.511710][ T26] audit: type=1800 audit(1579916714.792:241): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16537 res=0 [ 642.520140][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 642.550787][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.561690][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 642.572784][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.583384][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 642.595312][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.609951][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.624909][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.638640][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.650319][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.659969][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.669068][ T26] audit: type=1800 audit(1579916714.942:242): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16537 res=0 [ 642.669405][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.699805][ T9356] device bridge_slave_1 left promiscuous mode [ 642.706512][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.761871][ T26] audit: type=1800 audit(1579916715.042:243): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16537 res=0 [ 642.783116][ T9356] device bridge_slave_0 left promiscuous mode [ 642.790465][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.832618][ T9356] device veth1_macvtap left promiscuous mode [ 642.838885][ T9356] device veth0_macvtap left promiscuous mode [ 642.845151][ T9356] device veth1_vlan left promiscuous mode [ 642.851393][ T9356] device veth0_vlan left promiscuous mode [ 644.009712][ T9356] device hsr_slave_0 left promiscuous mode [ 644.069291][ T9356] device hsr_slave_1 left promiscuous mode [ 644.121602][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 644.133449][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 644.144645][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.192779][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.263961][ T9356] bond0 (unregistering): Released all slaves [ 644.371970][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.380943][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.392322][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.403893][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.414887][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.425842][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.437165][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.446346][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.457531][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.467455][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.479326][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.489254][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.499928][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.512194][T13526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.591461][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.600259][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.609276][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.619850][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.633187][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.644829][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.655317][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.666435][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.676919][T13526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.687682][T13526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.699282][T13526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.723839][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.733000][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.846282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.863459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.893482][T13524] device veth0_vlan entered promiscuous mode [ 644.902191][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.911667][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.926216][T13524] device veth1_vlan entered promiscuous mode [ 644.938738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.948084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.960167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 644.982023][ T26] audit: type=1800 audit(1579916717.262:244): pid=13571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16551 res=0 [ 644.998464][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.020448][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.033255][ T26] audit: type=1800 audit(1579916717.312:245): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16529 res=0 [ 645.041491][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 645.072990][T13524] device veth0_macvtap entered promiscuous mode [ 645.094081][ T26] audit: type=1800 audit(1579916717.372:246): pid=13571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16551 res=0 [ 645.102902][T13524] device veth1_macvtap entered promiscuous mode [ 645.150935][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 645.152308][ T26] audit: type=1800 audit(1579916717.412:247): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16529 res=0 [ 645.164990][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.198433][ T26] audit: type=1800 audit(1579916717.472:248): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16529 res=0 [ 645.209991][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 645.223901][ T26] audit: type=1800 audit(1579916717.472:249): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16551 res=0 [ 645.254755][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.265167][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 645.276004][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.286739][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 645.297706][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.310830][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.319462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 645.330395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 645.340147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 645.350243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 645.362146][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 645.373657][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.384101][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 645.395370][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.405900][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 645.416975][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.427589][T13524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 645.438589][T13524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.451410][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.460049][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 645.469835][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:45:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5c", 0xe}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 645.683285][ T26] audit: type=1800 audit(1579916717.962:250): pid=13581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16558 res=0 01:45:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5c", 0xe}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5c", 0xe}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724", 0x15}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 646.739871][ T9356] tipc: TX() has been purged, node left! 01:45:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) [ 646.921758][ T9356] tipc: TX() has been purged, node left! 01:45:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724", 0x15}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 648.664534][T13639] IPVS: ftp: loaded support on port[0] = 21 [ 648.692509][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.700212][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.708033][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.715912][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.724072][ T9356] device bridge_slave_1 left promiscuous mode [ 648.730720][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.789870][ T9356] device bridge_slave_0 left promiscuous mode [ 648.796102][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.862058][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.870043][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.878207][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.885678][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.893723][ T9356] device bridge_slave_1 left promiscuous mode [ 648.900397][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.939964][ T9356] device bridge_slave_0 left promiscuous mode [ 648.947333][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.994687][ T9356] device veth1_macvtap left promiscuous mode [ 649.001127][ T9356] device veth0_macvtap left promiscuous mode [ 649.007363][ T9356] device veth1_vlan left promiscuous mode [ 649.013953][ T9356] device veth0_vlan left promiscuous mode [ 649.020223][ T9356] device veth1_macvtap left promiscuous mode [ 649.026285][ T9356] device veth0_macvtap left promiscuous mode [ 649.032534][ T9356] device veth1_vlan left promiscuous mode [ 649.038370][ T9356] device veth0_vlan left promiscuous mode [ 651.229654][ T9356] device hsr_slave_0 left promiscuous mode [ 651.279315][ T9356] device hsr_slave_1 left promiscuous mode [ 651.331732][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 651.342823][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 651.353769][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.433340][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.492752][ T9356] bond0 (unregistering): Released all slaves [ 651.709617][ T9356] device hsr_slave_0 left promiscuous mode [ 651.769363][ T9356] device hsr_slave_1 left promiscuous mode [ 651.852079][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 651.862715][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 651.874134][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.952596][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.013401][ T9356] bond0 (unregistering): Released all slaves [ 652.112833][T13642] IPVS: ftp: loaded support on port[0] = 21 [ 652.118088][T13643] IPVS: ftp: loaded support on port[0] = 21 [ 652.166309][T13639] chnl_net:caif_netlink_parms(): no params data found [ 652.251414][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.258958][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.267435][T13639] device bridge_slave_0 entered promiscuous mode [ 652.279832][T13643] chnl_net:caif_netlink_parms(): no params data found [ 652.290033][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.297245][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.305383][T13639] device bridge_slave_1 entered promiscuous mode [ 652.400110][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.480930][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.490290][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.497331][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.508123][T13643] device bridge_slave_0 entered promiscuous mode [ 652.533725][T13639] team0: Port device team_slave_0 added [ 652.540624][T13642] chnl_net:caif_netlink_parms(): no params data found [ 652.553450][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.561198][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.572468][T13643] device bridge_slave_1 entered promiscuous mode [ 652.580298][T13639] team0: Port device team_slave_1 added [ 652.643036][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.652914][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.683022][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.697259][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.710878][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.718314][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.730611][T13642] device bridge_slave_0 entered promiscuous mode [ 652.738674][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.749025][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.778749][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.794840][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.806234][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.817202][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.826082][T13642] device bridge_slave_1 entered promiscuous mode [ 652.874233][T13643] team0: Port device team_slave_0 added [ 652.931660][T13639] device hsr_slave_0 entered promiscuous mode [ 653.009550][T13639] device hsr_slave_1 entered promiscuous mode [ 653.051194][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.062371][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.072701][T13643] team0: Port device team_slave_1 added [ 653.089409][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.096572][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.123099][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.145896][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.153233][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.180080][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.210884][T13642] team0: Port device team_slave_0 added [ 653.237838][T13642] team0: Port device team_slave_1 added [ 653.301576][T13643] device hsr_slave_0 entered promiscuous mode [ 653.359530][T13643] device hsr_slave_1 entered promiscuous mode [ 653.419288][T13643] debugfs: Directory 'hsr0' with parent '/' already present! [ 653.441501][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.448648][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.475045][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.490815][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.498700][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.526091][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.611907][T13642] device hsr_slave_0 entered promiscuous mode [ 653.679487][T13642] device hsr_slave_1 entered promiscuous mode [ 653.749281][T13642] debugfs: Directory 'hsr0' with parent '/' already present! [ 653.869680][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.887756][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.912019][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.920862][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.932703][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.943649][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.956529][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.964532][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.993175][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.002192][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.010770][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.017888][T13419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.026570][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.035959][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.044622][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.051789][T13419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.062304][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.071682][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.080817][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.089707][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.098271][T13419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.108976][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.118042][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.126839][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.134086][T13419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.142665][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.151727][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.163262][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.173001][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.181682][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.195089][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.207653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.217188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.226961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.244024][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.253429][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.263468][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.272830][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.282232][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.291515][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.308861][T13642] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.323872][T13643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.334625][T13643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.350434][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.358729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.367823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.376555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.384695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.392685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.402498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.411686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.420514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.429612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.439448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.449298][T13639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.460867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.469614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.478805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.488377][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.495874][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.504532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.520962][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.530537][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.540016][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.547247][T13417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.569346][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.578641][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.600211][T13642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.611750][T13642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.626091][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.635685][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.645066][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.654118][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.663416][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.672832][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.681791][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.691083][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.699752][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.707461][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.715167][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.722987][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.730788][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.744700][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.756833][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.777346][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.787167][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.802389][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.813346][T13642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.884252][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.894007][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.911146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.920649][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.949090][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.957523][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.966798][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.975761][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.986487][T13643] device veth0_vlan entered promiscuous mode [ 654.996792][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.005402][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.014022][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.022471][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.030607][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.039681][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.052681][T13643] device veth1_vlan entered promiscuous mode [ 655.060981][T13639] device veth0_vlan entered promiscuous mode [ 655.082920][T13639] device veth1_vlan entered promiscuous mode [ 655.100677][T13643] device veth0_macvtap entered promiscuous mode [ 655.108715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 655.117294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 655.126063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 655.134815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.143648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.153482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.162949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.172562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.181040][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.190282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 655.200832][T13643] device veth1_macvtap entered promiscuous mode [ 655.216397][T13642] device veth0_vlan entered promiscuous mode [ 655.224242][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 655.233433][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.248678][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.259661][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.270082][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.281050][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.291312][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.301837][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.313477][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.328005][T13639] device veth0_macvtap entered promiscuous mode [ 655.342825][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.351894][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.361798][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.371435][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.382138][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.394833][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.405633][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.416881][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.427060][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.437521][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.449097][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.458207][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 655.470831][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.479577][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.489910][T13639] device veth1_macvtap entered promiscuous mode [ 655.510613][T13642] device veth1_vlan entered promiscuous mode [ 655.524712][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.535806][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.546351][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.557176][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.567454][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.578473][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.590145][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.614715][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.634631][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.656388][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.664702][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.676067][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.687112][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.698527][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.709062][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.720756][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.731318][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.741863][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.752094][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 655.763195][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.778208][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.789530][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 655.789550][ T26] audit: type=1800 audit(1579916728.072:262): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16561 res=0 [ 655.819194][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.828084][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.838006][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.847944][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.862490][T13642] device veth0_macvtap entered promiscuous mode [ 655.878431][T13642] device veth1_macvtap entered promiscuous mode [ 655.915608][ T26] audit: type=1800 audit(1579916728.192:263): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16561 res=0 [ 655.931590][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.952837][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.963173][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.974943][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.985524][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 655.997495][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.009343][ T26] audit: type=1800 audit(1579916728.292:264): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16561 res=0 [ 656.009453][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.041087][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.051537][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.062037][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.077457][T13642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.086516][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.098696][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.108583][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.122442][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.138500][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.157718][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.168455][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.192313][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.215685][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.238989][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:45:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724", 0x15}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 656.260683][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.275185][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.287816][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.300301][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.316304][T13642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.325384][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 656.338795][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:45:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 01:45:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 01:45:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d", 0x18}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 656.590368][ T26] audit: type=1800 audit(1579916728.872:265): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16576 res=0 [ 656.668996][ T26] audit: type=1800 audit(1579916728.942:266): pid=13702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16564 res=0 [ 656.745352][ T26] audit: type=1800 audit(1579916728.982:267): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16576 res=0 [ 656.913608][ T26] audit: type=1800 audit(1579916728.992:268): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16581 res=0 [ 656.974277][ T26] audit: type=1800 audit(1579916729.002:269): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16547 res=0 [ 657.002544][ T26] audit: type=1800 audit(1579916729.052:270): pid=13708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16548 res=0 [ 657.024258][ T26] audit: type=1800 audit(1579916729.072:271): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16576 res=0 01:45:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d", 0x18}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 01:45:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 01:45:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d", 0x18}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 657.799222][ T42] tipc: TX() has been purged, node left! 01:45:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) 01:45:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 01:45:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 01:45:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31", 0x19}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31", 0x19}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31", 0x19}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) 01:45:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) [ 660.172932][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.191495][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.209085][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.234794][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.252622][ T42] device bridge_slave_1 left promiscuous mode [ 660.266854][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.322784][ T42] device bridge_slave_0 left promiscuous mode [ 660.336114][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.473204][ T42] device veth1_macvtap left promiscuous mode [ 660.485694][ T42] device veth0_macvtap left promiscuous mode [ 660.499264][ T42] device veth1_vlan left promiscuous mode [ 660.510320][ T42] device veth0_vlan left promiscuous mode [ 661.799648][ T42] device hsr_slave_0 left promiscuous mode [ 661.849509][ T42] device hsr_slave_1 left promiscuous mode [ 661.902045][ T42] team0 (unregistering): Port device team_slave_1 removed [ 661.914454][ T42] team0 (unregistering): Port device team_slave_0 removed [ 661.925496][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.973158][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.035190][ T42] bond0 (unregistering): Released all slaves [ 662.116844][T13845] IPVS: ftp: loaded support on port[0] = 21 [ 662.184266][T13845] chnl_net:caif_netlink_parms(): no params data found [ 662.258360][T13845] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.266680][T13845] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.278261][T13845] device bridge_slave_0 entered promiscuous mode [ 662.286437][T13845] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.299008][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.307772][T13845] device bridge_slave_1 entered promiscuous mode [ 662.335084][T13845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.347449][T13845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.380238][T13845] team0: Port device team_slave_0 added [ 662.387824][T13845] team0: Port device team_slave_1 added [ 662.407500][T13845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.415973][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.444785][T13845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.458131][T13845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.467298][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.493932][T13845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.561597][T13845] device hsr_slave_0 entered promiscuous mode [ 662.599598][T13845] device hsr_slave_1 entered promiscuous mode [ 662.649260][T13845] debugfs: Directory 'hsr0' with parent '/' already present! [ 662.696470][T13845] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.703618][T13845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.710996][T13845] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.718486][T13845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.756331][T13845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.770596][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.780046][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.788575][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.805409][T13845] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.819364][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.828690][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.835971][T13417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.847384][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.856771][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.864144][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.884284][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.893812][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.908928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.928679][T13845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.940656][T13845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.956132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.966745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.977003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.003503][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.011560][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.023288][T13845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.080816][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.097185][T13845] device veth0_vlan entered promiscuous mode [ 663.104454][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.115642][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.123825][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 663.134571][T13845] device veth1_vlan entered promiscuous mode [ 663.153424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 663.162288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.173942][T13845] device veth0_macvtap entered promiscuous mode [ 663.183796][T13845] device veth1_macvtap entered promiscuous mode [ 663.197775][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 663.209291][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.220289][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 663.231712][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.241722][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 663.252849][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.262898][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 663.273413][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.283625][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 663.294444][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.305798][T13845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.315020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 663.324056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 663.332591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.341557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.352917][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 663.364173][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.374263][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 663.385067][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.395225][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 663.405925][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.416153][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 663.426854][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.437164][T13845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 663.449228][T13845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.460716][T13845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.469220][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 663.478330][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.690189][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 663.690606][ T26] audit: type=1800 audit(1579916735.972:307): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16617 res=0 [ 663.802341][ T26] audit: type=1800 audit(1579916736.082:308): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16617 res=0 [ 663.876706][ T26] audit: type=1800 audit(1579916736.152:309): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16617 res=0 01:45:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) 01:45:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) [ 664.569921][ T26] audit: type=1800 audit(1579916736.842:310): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16633 res=0 01:45:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 664.638344][ T26] audit: type=1800 audit(1579916736.882:311): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16637 res=0 [ 664.692639][ T26] audit: type=1800 audit(1579916736.892:312): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16636 res=0 01:45:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 664.741982][ T26] audit: type=1800 audit(1579916736.962:313): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16633 res=0 [ 664.771438][ T26] audit: type=1800 audit(1579916737.022:314): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16637 res=0 [ 664.798420][ T26] audit: type=1800 audit(1579916737.052:315): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16633 res=0 [ 664.819066][ T26] audit: type=1800 audit(1579916737.072:316): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16636 res=0 01:45:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 665.109492][ T8105] tipc: TX() has been purged, node left! 01:45:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) 01:45:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) 01:45:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {0x0}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {0x0}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) 01:45:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) [ 667.145085][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.178849][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.209021][ T8105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.234032][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.247308][ T8105] device bridge_slave_1 left promiscuous mode [ 667.258384][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.301845][ T8105] device bridge_slave_0 left promiscuous mode [ 667.308296][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.366370][ T8105] device veth1_macvtap left promiscuous mode [ 667.374291][ T8105] device veth0_macvtap left promiscuous mode [ 667.382573][ T8105] device veth1_vlan left promiscuous mode [ 667.388501][ T8105] device veth0_vlan left promiscuous mode [ 668.689573][ T8105] device hsr_slave_0 left promiscuous mode [ 668.729263][ T8105] device hsr_slave_1 left promiscuous mode [ 668.781833][ T8105] team0 (unregistering): Port device team_slave_1 removed [ 668.793021][ T8105] team0 (unregistering): Port device team_slave_0 removed [ 668.804028][ T8105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.853374][ T8105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.954380][ T8105] bond0 (unregistering): Released all slaves [ 669.075828][T13978] IPVS: ftp: loaded support on port[0] = 21 [ 669.133215][T13978] chnl_net:caif_netlink_parms(): no params data found [ 669.166618][T13978] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.173966][T13978] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.182005][T13978] device bridge_slave_0 entered promiscuous mode [ 669.189861][T13978] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.197097][T13978] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.205070][T13978] device bridge_slave_1 entered promiscuous mode [ 669.281158][T13978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.292647][T13978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.314906][T13978] team0: Port device team_slave_0 added [ 669.322305][T13978] team0: Port device team_slave_1 added [ 669.340810][T13978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.347924][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.374512][T13978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.387338][T13978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.394836][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.421612][T13978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.494794][T13978] device hsr_slave_0 entered promiscuous mode [ 669.549899][T13978] device hsr_slave_1 entered promiscuous mode [ 669.589247][T13978] debugfs: Directory 'hsr0' with parent '/' already present! [ 669.641979][T13978] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.649232][T13978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.656648][T13978] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.663797][T13978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.716926][T13978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.729841][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.738167][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.746287][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.769672][T13978] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.791232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.800318][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.807386][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.823420][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.832135][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.839309][T13417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.861331][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.870810][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.880119][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.892501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.906482][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.916454][T13978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.932964][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.940509][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.951779][T13978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.021065][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 670.030472][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 670.039350][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 670.047469][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.057969][T13978] device veth0_vlan entered promiscuous mode [ 670.070120][T13978] device veth1_vlan entered promiscuous mode [ 670.080571][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 670.089089][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 670.105308][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 670.114341][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 670.125811][T13978] device veth0_macvtap entered promiscuous mode [ 670.135659][T13978] device veth1_macvtap entered promiscuous mode [ 670.149798][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.160390][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.170728][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.181827][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.191733][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.202553][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.213454][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.224305][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.234510][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.245393][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.256850][T13978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.264939][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 670.275612][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 670.284078][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.292967][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.303203][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.314691][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.324883][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.335528][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.345507][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.356099][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.366143][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.377372][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.388185][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.398804][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.410839][T13978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.419557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.428552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.613200][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 670.613219][ T26] audit: type=1800 audit(1579916742.892:334): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16653 res=0 [ 670.750436][ T26] audit: type=1800 audit(1579916743.032:335): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16653 res=0 [ 670.822366][ T26] audit: type=1800 audit(1579916743.102:336): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16653 res=0 01:45:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {0x0}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) 01:45:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) 01:45:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 671.492722][ T26] audit: type=1800 audit(1579916743.772:338): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16669 res=0 01:45:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) [ 671.593131][ T26] audit: type=1800 audit(1579916743.772:337): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16668 res=0 [ 671.742460][ T26] audit: type=1800 audit(1579916743.802:339): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16505 res=0 [ 671.767480][ T26] audit: type=1800 audit(1579916743.902:340): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16669 res=0 [ 671.790404][ T26] audit: type=1800 audit(1579916743.902:341): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16668 res=0 01:45:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 671.830953][ T26] audit: type=1800 audit(1579916743.932:342): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16505 res=0 01:45:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x280900) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 671.944138][ T26] audit: type=1800 audit(1579916743.972:343): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16668 res=0 [ 672.059170][ T42] tipc: TX() has been purged, node left! 01:45:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) 01:45:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) 01:45:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e", 0xb}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) 01:45:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 674.432893][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.440630][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.450033][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.457859][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.469269][ T42] device bridge_slave_1 left promiscuous mode [ 674.475693][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.522016][ T42] device bridge_slave_0 left promiscuous mode [ 674.528411][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.583250][ T42] device veth1_macvtap left promiscuous mode [ 674.589803][ T42] device veth0_macvtap left promiscuous mode [ 674.595931][ T42] device veth1_vlan left promiscuous mode [ 674.602337][ T42] device veth0_vlan left promiscuous mode [ 675.809398][ T42] device hsr_slave_0 left promiscuous mode [ 675.849397][ T42] device hsr_slave_1 left promiscuous mode [ 675.901924][ T42] team0 (unregistering): Port device team_slave_1 removed [ 675.913138][ T42] team0 (unregistering): Port device team_slave_0 removed [ 675.924362][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.963123][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.044620][ T42] bond0 (unregistering): Released all slaves [ 676.146804][T14117] IPVS: ftp: loaded support on port[0] = 21 [ 676.202413][T14117] chnl_net:caif_netlink_parms(): no params data found [ 676.233603][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.241437][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.249609][T14117] device bridge_slave_0 entered promiscuous mode [ 676.299557][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.306795][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.315311][T14117] device bridge_slave_1 entered promiscuous mode [ 676.334847][T14117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.346362][T14117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.367665][T14117] team0: Port device team_slave_0 added [ 676.375111][T14117] team0: Port device team_slave_1 added [ 676.395238][T14117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.402510][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.431905][T14117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.444830][T14117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.455009][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.485790][T14117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.564754][T14117] device hsr_slave_0 entered promiscuous mode [ 676.609592][T14117] device hsr_slave_1 entered promiscuous mode [ 676.662318][T14117] debugfs: Directory 'hsr0' with parent '/' already present! [ 676.711567][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.718837][T14117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.731123][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.738165][T14117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.775026][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.788799][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.798069][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.808161][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.824527][T14117] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.844421][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.858480][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.865924][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.890760][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.899784][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.907008][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.916187][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 676.925584][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 676.935915][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 676.951698][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 676.960706][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 676.971412][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 676.988357][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.996592][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 677.015079][T14117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.081404][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.091201][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.100401][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.108416][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.118578][T14117] device veth0_vlan entered promiscuous mode [ 677.132827][T14117] device veth1_vlan entered promiscuous mode [ 677.150803][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.161563][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 677.172638][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.184242][T13417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.195533][T14117] device veth0_macvtap entered promiscuous mode [ 677.206439][T14117] device veth1_macvtap entered promiscuous mode [ 677.221534][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 677.232747][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.243058][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 677.254631][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.264873][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 677.275467][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.285592][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 677.296365][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.307129][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 677.318058][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.330172][T14117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.338746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 677.347966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.356406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.365796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.376415][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 677.388479][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.399060][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 677.409693][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.419746][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 677.430379][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.440524][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 677.451226][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.461110][T14117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 677.471827][T14117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.483379][T14117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.491606][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.500758][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.652713][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 677.652735][ T26] audit: type=1800 audit(1579916749.932:362): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16699 res=0 [ 677.792716][ T26] audit: type=1800 audit(1579916750.072:363): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16699 res=0 [ 677.866361][ T26] audit: type=1800 audit(1579916750.142:364): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16699 res=0 01:45:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e9ae6e39b444b5fc39659", 0x15}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="3fbe3fdb65e593bcfd99d57a463f5b762b5fc448b2292c41dc73916de0663a", 0x1f}, {&(0x7f00000000c0)="030a562e8b77897f37bd9d3aa00d400b88e25c7c8cefad1b4730fc87e6a1558c69c7a829f8902d1146cda2dc9fb2f302386398", 0x33}, {&(0x7f00000001c0)="e8c8996910dc9d5763ea0e", 0xb}, {&(0x7f0000000440)="a8dfb1423046060f5e23845fcd5cab288ca643b724ecc83d31e5", 0x1a}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 01:45:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) 01:45:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 01:45:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x280900) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x280900) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 01:45:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, 0xffffffffffffffff, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x280900) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 678.565363][ T26] audit: type=1800 audit(1579916750.842:365): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16715 res=0 [ 678.658848][T14148] ================================================================== [ 678.666979][T14148] BUG: KCSAN: data-race in ext4_sync_file / writeback_single_inode [ 678.675005][T14148] [ 678.677630][T14148] read to 0xffff88812554d5c0 of 8 bytes by task 14152 on cpu 1: [ 678.685643][T14148] ext4_sync_file+0x44a/0xaf0 [ 678.690322][T14148] vfs_fsync_range+0x82/0x150 [ 678.695005][T14148] ext4_buffered_write_iter+0x222/0x290 [ 678.700555][T14148] ext4_file_write_iter+0xf4/0xd40 [ 678.705680][T14148] do_iter_readv_writev+0x487/0x5b0 [ 678.710880][T14148] do_iter_write+0x13b/0x3c0 [ 678.715465][T14148] vfs_iter_write+0x5c/0x80 [ 678.720079][T14148] iter_file_splice_write+0x530/0x840 [ 678.725525][T14148] direct_splice_actor+0xa0/0xc0 [ 678.730598][T14148] splice_direct_to_actor+0x22b/0x540 [ 678.735975][T14148] do_splice_direct+0x161/0x1e0 [ 678.740986][T14148] do_sendfile+0x384/0x7f0 [ 678.745411][T14148] __x64_sys_sendfile64+0x12a/0x140 [ 678.750629][T14148] do_syscall_64+0xcc/0x3a0 [ 678.755441][T14148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.761759][T14148] [ 678.764217][T14148] write to 0xffff88812554d5c0 of 8 bytes by task 14148 on cpu 0: [ 678.771938][T14148] writeback_single_inode+0x214/0x310 [ 678.777412][T14148] sync_inode_metadata+0x74/0xa0 [ 678.782354][T14148] ext4_sync_file+0x4b5/0xaf0 [ 678.787031][T14148] vfs_fsync_range+0x82/0x150 [ 678.792808][T14148] ext4_buffered_write_iter+0x222/0x290 [ 678.798354][T14148] ext4_file_write_iter+0xf4/0xd40 [ 678.803777][T14148] do_iter_readv_writev+0x487/0x5b0 [ 678.808987][T14148] do_iter_write+0x13b/0x3c0 [ 678.813811][T14148] vfs_iter_write+0x5c/0x80 [ 678.818909][T14148] iter_file_splice_write+0x530/0x840 [ 678.824452][T14148] direct_splice_actor+0xa0/0xc0 [ 678.829388][T14148] splice_direct_to_actor+0x22b/0x540 [ 678.834946][T14148] do_splice_direct+0x161/0x1e0 [ 678.839806][T14148] do_sendfile+0x384/0x7f0 [ 678.844236][T14148] __x64_sys_sendfile64+0x12a/0x140 [ 678.849440][T14148] do_syscall_64+0xcc/0x3a0 [ 678.854459][T14148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.860423][T14148] [ 678.862899][T14148] Reported by Kernel Concurrency Sanitizer on: [ 678.869172][T14148] CPU: 0 PID: 14148 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 678.878233][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.888308][T14148] ================================================================== [ 678.896452][T14148] Kernel panic - not syncing: panic_on_warn set ... [ 678.903236][T14148] CPU: 0 PID: 14148 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 678.911900][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.921972][T14148] Call Trace: [ 678.925309][T14148] dump_stack+0x11d/0x181 [ 678.929793][T14148] panic+0x210/0x640 [ 678.934110][T14148] ? vprintk_func+0x8d/0x140 [ 678.938782][T14148] kcsan_report.cold+0xc/0xd [ 678.944704][T14148] kcsan_setup_watchpoint+0x3fe/0x460 [ 678.950090][T14148] __tsan_unaligned_write8+0xc7/0x110 [ 678.955592][T14148] writeback_single_inode+0x214/0x310 [ 678.961032][T14148] sync_inode_metadata+0x74/0xa0 [ 678.966152][T14148] ext4_sync_file+0x4b5/0xaf0 [ 678.970850][T14148] ? __read_once_size.constprop.0+0x20/0x20 [ 678.976757][T14148] vfs_fsync_range+0x82/0x150 [ 678.981466][T14148] ext4_buffered_write_iter+0x222/0x290 [ 678.987024][T14148] ext4_file_write_iter+0xf4/0xd40 [ 678.992349][T14148] ? common_file_perm+0x1d5/0x490 [ 678.997379][T14148] ? native_smp_send_reschedule+0x4c/0x70 [ 679.003100][T14148] do_iter_readv_writev+0x487/0x5b0 [ 679.008501][T14148] do_iter_write+0x13b/0x3c0 [ 679.013095][T14148] vfs_iter_write+0x5c/0x80 [ 679.017598][T14148] iter_file_splice_write+0x530/0x840 [ 679.023058][T14148] ? page_cache_pipe_buf_release+0x100/0x100 [ 679.029170][T14148] direct_splice_actor+0xa0/0xc0 [ 679.034159][T14148] splice_direct_to_actor+0x22b/0x540 [ 679.039633][T14148] ? generic_pipe_buf_nosteal+0x20/0x20 [ 679.045333][T14148] do_splice_direct+0x161/0x1e0 [ 679.050459][T14148] do_sendfile+0x384/0x7f0 [ 679.054888][T14148] __x64_sys_sendfile64+0x12a/0x140 [ 679.060449][T14148] do_syscall_64+0xcc/0x3a0 [ 679.065014][T14148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 679.070913][T14148] RIP: 0033:0x45b349 [ 679.074813][T14148] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.094611][T14148] RSP: 002b:00007f5176f0cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 679.103991][T14148] RAX: ffffffffffffffda RBX: 00007f5176f0d6d4 RCX: 000000000045b349 [ 679.112074][T14148] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 679.120137][T14148] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 679.128127][T14148] R10: 00008400fffffffa R11: 0000000000000246 R12: 00000000ffffffff [ 679.136105][T14148] R13: 00000000000008a6 R14: 00000000004ca018 R15: 000000000075c07c [ 679.145908][T14148] Kernel Offset: disabled [ 679.150295][T14148] Rebooting in 86400 seconds..