[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. 2020/06/20 00:15:36 fuzzer started 2020/06/20 00:15:37 dialing manager at 10.128.0.26:43769 2020/06/20 00:15:37 syscalls: 3091 2020/06/20 00:15:37 code coverage: enabled 2020/06/20 00:15:37 comparison tracing: enabled 2020/06/20 00:15:37 extra coverage: enabled 2020/06/20 00:15:37 setuid sandbox: enabled 2020/06/20 00:15:37 namespace sandbox: enabled 2020/06/20 00:15:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/20 00:15:37 fault injection: enabled 2020/06/20 00:15:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/20 00:15:37 net packet injection: enabled 2020/06/20 00:15:37 net device setup: enabled 2020/06/20 00:15:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/20 00:15:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/20 00:15:37 USB emulation: enabled 00:16:36 executing program 0: syzkaller login: [ 116.003771][ T6811] IPVS: ftp: loaded support on port[0] = 21 [ 116.133584][ T6811] chnl_net:caif_netlink_parms(): no params data found 00:16:36 executing program 1: [ 116.212035][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.221077][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.230744][ T6811] device bridge_slave_0 entered promiscuous mode [ 116.244982][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.252671][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.262415][ T6811] device bridge_slave_1 entered promiscuous mode [ 116.290292][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.302602][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.335672][ T6811] team0: Port device team_slave_0 added [ 116.347447][ T6811] team0: Port device team_slave_1 added [ 116.379707][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.386765][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.416354][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.432727][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.459127][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.485143][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.520722][ T6965] IPVS: ftp: loaded support on port[0] = 21 00:16:37 executing program 2: [ 116.554682][ T6811] device hsr_slave_0 entered promiscuous mode [ 116.610975][ T6811] device hsr_slave_1 entered promiscuous mode 00:16:37 executing program 3: [ 117.000348][ T6965] chnl_net:caif_netlink_parms(): no params data found [ 117.087273][ T7030] IPVS: ftp: loaded support on port[0] = 21 [ 117.140115][ T6811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.224657][ T6811] netdevsim netdevsim0 netdevsim1: renamed from eth1 00:16:37 executing program 4: [ 117.301982][ T6811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.393957][ T6811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.406373][ T7141] IPVS: ftp: loaded support on port[0] = 21 [ 117.560909][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.568002][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.579313][ T6965] device bridge_slave_0 entered promiscuous mode 00:16:38 executing program 5: [ 117.620902][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.627998][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.644049][ T7168] IPVS: ftp: loaded support on port[0] = 21 [ 117.650465][ T6965] device bridge_slave_1 entered promiscuous mode [ 117.750888][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.838088][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.900810][ T7030] chnl_net:caif_netlink_parms(): no params data found [ 117.927839][ T6965] team0: Port device team_slave_0 added [ 117.956491][ T6965] team0: Port device team_slave_1 added [ 117.966848][ T7287] IPVS: ftp: loaded support on port[0] = 21 [ 118.074029][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.083836][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.111418][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.175216][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.183769][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.212609][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.293441][ T6965] device hsr_slave_0 entered promiscuous mode [ 118.342109][ T6965] device hsr_slave_1 entered promiscuous mode [ 118.379206][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.387036][ T6965] Cannot create hsr debugfs directory [ 118.432666][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 118.444103][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.451492][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.459766][ T7030] device bridge_slave_0 entered promiscuous mode [ 118.472591][ T7141] chnl_net:caif_netlink_parms(): no params data found [ 118.507273][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.515640][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.526768][ T7030] device bridge_slave_1 entered promiscuous mode [ 118.579890][ T7030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.594889][ T7030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.689391][ T7030] team0: Port device team_slave_0 added [ 118.698048][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.727002][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.737757][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.747345][ T7168] device bridge_slave_0 entered promiscuous mode [ 118.758452][ T7030] team0: Port device team_slave_1 added [ 118.793234][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.801133][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.828576][ T7030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.843856][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.851970][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.861386][ T7168] device bridge_slave_1 entered promiscuous mode [ 118.907431][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.915525][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.946016][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.998534][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.036641][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 119.072750][ T7030] device hsr_slave_0 entered promiscuous mode [ 119.119562][ T7030] device hsr_slave_1 entered promiscuous mode [ 119.158992][ T7030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.166550][ T7030] Cannot create hsr debugfs directory [ 119.196544][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.221570][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.230441][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.244251][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.251432][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.261228][ T7141] device bridge_slave_0 entered promiscuous mode [ 119.295401][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.307520][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.316657][ T7141] device bridge_slave_1 entered promiscuous mode [ 119.336476][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.360554][ T7168] team0: Port device team_slave_0 added [ 119.405512][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.421651][ T7168] team0: Port device team_slave_1 added [ 119.441067][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.511472][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.521390][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.530551][ T3892] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.537822][ T3892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.547310][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.557676][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.566516][ T3892] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.573765][ T3892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.582364][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.593501][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.602589][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.611826][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.635035][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.643282][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.670415][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.684640][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.692211][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.718728][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.739479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.747463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.758446][ T7141] team0: Port device team_slave_0 added [ 119.783695][ T7141] team0: Port device team_slave_1 added [ 119.828770][ T6965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.884624][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.891996][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.900935][ T7287] device bridge_slave_0 entered promiscuous mode [ 119.941269][ T7168] device hsr_slave_0 entered promiscuous mode [ 119.989404][ T7168] device hsr_slave_1 entered promiscuous mode [ 120.049074][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.056653][ T7168] Cannot create hsr debugfs directory [ 120.066102][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.075299][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.084163][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.093757][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.124293][ T6965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.180713][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.187804][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.197097][ T7287] device bridge_slave_1 entered promiscuous mode [ 120.223678][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.231015][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.262588][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.275989][ T6965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.352953][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.365016][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.381193][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.388151][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.416516][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.428573][ T6965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.483597][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.550496][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.655707][ T7141] device hsr_slave_0 entered promiscuous mode [ 120.709287][ T7141] device hsr_slave_1 entered promiscuous mode [ 120.748900][ T7141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.756480][ T7141] Cannot create hsr debugfs directory [ 120.807255][ T7287] team0: Port device team_slave_0 added [ 120.840703][ T7287] team0: Port device team_slave_1 added [ 120.888509][ T7030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.928324][ T7030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.964916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.976697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.019296][ T7030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.068492][ T7030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.133792][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.141645][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.148604][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.175852][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.261210][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.268213][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.296136][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.392379][ T7287] device hsr_slave_0 entered promiscuous mode [ 121.421460][ T7287] device hsr_slave_1 entered promiscuous mode [ 121.478880][ T7287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.486455][ T7287] Cannot create hsr debugfs directory [ 121.605710][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.619958][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.640765][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.675260][ T6811] device veth0_vlan entered promiscuous mode [ 121.695281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.705034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.714148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.722617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.735483][ T7141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.782347][ T7141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.832925][ T7141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.896548][ T6811] device veth1_vlan entered promiscuous mode [ 121.905006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.913732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.922849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.950436][ T6965] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.963745][ T7168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.030564][ T7141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.087568][ T7168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.142423][ T7168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.226982][ T7168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.261423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.270465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.280228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.288522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.295783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.303935][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.313411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.322123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.329383][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.337452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.367368][ T6811] device veth0_macvtap entered promiscuous mode [ 122.383915][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.392371][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.402486][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.454857][ T6811] device veth1_macvtap entered promiscuous mode [ 122.463741][ T7287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.510484][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.519707][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.527654][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.536890][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.546338][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.561950][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.590066][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.598006][ T7287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.661359][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.672785][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.682403][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.691707][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.701095][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.729639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.738096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.753550][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.762135][ T7287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.823368][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.834548][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.845139][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.855304][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.864103][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.872342][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.888791][ T6965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.904589][ T7287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.960144][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.021861][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.033882][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.045197][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.052343][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.172246][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.183156][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.194043][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.203551][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.210681][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.218999][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.227662][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.236230][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:16:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x9, 0x3fc, 0xffffffe0}, 0x40) [ 123.339519][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.348386][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.360691][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.380462][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.400238][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.416244][ T7141] 8021q: adding VLAN 0 to HW filter on device bond0 00:16:44 executing program 0: 00:16:44 executing program 0: [ 123.472443][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.490779][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 00:16:44 executing program 0: [ 123.581470][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.589545][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.605636][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.646736][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.657314][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.674350][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:16:44 executing program 0: [ 123.699567][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.710435][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.760149][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 00:16:44 executing program 0: [ 123.825107][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.840005][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 00:16:44 executing program 0: [ 123.877179][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.884341][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.894383][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.904152][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.994674][ T6965] device veth0_vlan entered promiscuous mode [ 124.010500][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.020384][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.028272][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.037797][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.048444][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.058155][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.065307][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.074988][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.104200][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.138308][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.180277][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.190522][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.203647][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.213137][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.239781][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.250156][ T6965] device veth1_vlan entered promiscuous mode [ 124.267802][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.276173][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.285592][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.294584][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.303531][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.312736][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.321446][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.330474][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.347178][ T7030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.373375][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.406743][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.416042][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.425071][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.464924][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.472606][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.481670][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.490439][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.499320][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.507162][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.517201][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.531108][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.565336][ T7141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.578771][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.587663][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.597779][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.604913][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.613600][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.623315][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.633045][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.643660][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.654335][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.661457][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.672144][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.684423][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.696626][ T6965] device veth0_macvtap entered promiscuous mode [ 124.721868][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.737083][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.746456][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.753739][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.769019][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.777770][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.789784][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.796854][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.805262][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.820089][ T6965] device veth1_macvtap entered promiscuous mode [ 124.854295][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.867174][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.876649][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.891285][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.900703][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.927349][ T7030] device veth0_vlan entered promiscuous mode [ 124.936235][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.945566][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.954143][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.965546][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.975610][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.985549][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.996938][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 125.009677][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.021685][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.035487][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 125.046889][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.060430][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.073566][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.082162][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.092557][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.102786][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.112393][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.121390][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.130514][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.142029][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.168266][ T7030] device veth1_vlan entered promiscuous mode [ 125.188492][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.197784][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.207445][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.217123][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.228236][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.237145][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.246455][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.274575][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.287672][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.297206][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.311127][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.322567][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.332505][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.356031][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.385834][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.477036][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.485297][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.494387][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.506034][ T7141] device veth0_vlan entered promiscuous mode [ 125.560565][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.569985][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 00:16:46 executing program 1: [ 125.625142][ T7141] device veth1_vlan entered promiscuous mode [ 125.659506][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.683126][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.692076][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.708826][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.716429][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.752197][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.765401][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.807944][ T7030] device veth0_macvtap entered promiscuous mode [ 125.856245][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.874548][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.886472][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.897215][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.912012][ T7030] device veth1_macvtap entered promiscuous mode [ 125.983992][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.006013][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.027689][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.041299][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.053096][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.062735][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.075315][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.084440][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.094074][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.107810][ T7141] device veth0_macvtap entered promiscuous mode [ 126.119580][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.132167][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.143217][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.156932][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.169834][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.194449][ T7141] device veth1_macvtap entered promiscuous mode [ 126.202792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.211132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.220082][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.228953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.363441][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.372819][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.383040][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.393298][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.508002][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.538923][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:16:47 executing program 2: [ 126.550821][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.563336][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.582572][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.608679][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.640543][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.648218][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.665057][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.675299][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.693699][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.710401][ T7287] device veth0_vlan entered promiscuous mode [ 126.749260][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.760137][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.771299][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.782579][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.793635][ T7141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.804702][ T7141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.818127][ T7141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.826420][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.835107][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.843677][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.855027][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.883708][ T7168] device veth0_vlan entered promiscuous mode [ 126.902341][ T7287] device veth1_vlan entered promiscuous mode [ 126.911107][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.920935][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.931125][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.941658][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.955670][ T7168] device veth1_vlan entered promiscuous mode [ 127.156817][ T7287] device veth0_macvtap entered promiscuous mode [ 127.180361][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 00:16:47 executing program 3: [ 127.219097][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.227423][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.238441][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.250883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.275938][ T7287] device veth1_macvtap entered promiscuous mode [ 127.309089][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.317190][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.349218][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.361633][ T7168] device veth0_macvtap entered promiscuous mode [ 127.398301][ T7168] device veth1_macvtap entered promiscuous mode [ 127.430308][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.452617][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.470003][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.481083][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.494509][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.508046][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.520854][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.533979][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.546345][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.561994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.570606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.581117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.589775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.607137][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.628487][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.642773][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.655009][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.668789][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.680119][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.690672][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.701418][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.711347][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.721903][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.734234][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.748031][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.760653][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.771905][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.783154][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.793636][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.804710][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.815652][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.826876][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.839297][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.847019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.856537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.871487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.881717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.895105][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.909455][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.923815][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.934967][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.945353][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.957083][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.967291][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.978286][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.988109][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.999153][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.013361][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.029809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.039319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:16:49 executing program 4: 00:16:49 executing program 0: 00:16:49 executing program 1: 00:16:49 executing program 2: 00:16:49 executing program 3: 00:16:49 executing program 5: 00:16:49 executing program 3: 00:16:49 executing program 1: 00:16:49 executing program 0: 00:16:49 executing program 2: 00:16:49 executing program 4: 00:16:49 executing program 5: 00:16:49 executing program 4: 00:16:49 executing program 0: 00:16:49 executing program 1: 00:16:49 executing program 2: 00:16:49 executing program 3: 00:16:49 executing program 5: 00:16:49 executing program 4: 00:16:49 executing program 1: 00:16:49 executing program 0: 00:16:49 executing program 3: 00:16:49 executing program 2: 00:16:49 executing program 5: 00:16:49 executing program 4: 00:16:49 executing program 0: 00:16:49 executing program 1: 00:16:49 executing program 2: 00:16:49 executing program 3: 00:16:49 executing program 5: 00:16:49 executing program 0: 00:16:49 executing program 4: 00:16:49 executing program 2: 00:16:49 executing program 3: 00:16:49 executing program 1: 00:16:49 executing program 5: 00:16:49 executing program 4: 00:16:49 executing program 0: 00:16:49 executing program 3: 00:16:49 executing program 1: 00:16:50 executing program 2: 00:16:50 executing program 5: 00:16:50 executing program 4: 00:16:50 executing program 1: 00:16:50 executing program 0: 00:16:50 executing program 3: 00:16:50 executing program 2: 00:16:50 executing program 5: 00:16:50 executing program 0: 00:16:50 executing program 4: 00:16:50 executing program 3: 00:16:50 executing program 1: 00:16:50 executing program 2: 00:16:50 executing program 5: 00:16:50 executing program 0: 00:16:50 executing program 4: 00:16:50 executing program 3: 00:16:50 executing program 1: 00:16:50 executing program 0: 00:16:50 executing program 2: 00:16:50 executing program 5: 00:16:50 executing program 1: 00:16:50 executing program 3: 00:16:50 executing program 4: socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x7, 0x1a, 0x7, 0x1, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) 00:16:50 executing program 0: mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) 00:16:50 executing program 2: 00:16:50 executing program 1: 00:16:50 executing program 5: 00:16:50 executing program 3: [ 130.102998][ T8186] overlayfs: overlapping lowerdir path 00:16:50 executing program 4: 00:16:50 executing program 0: 00:16:50 executing program 1: 00:16:50 executing program 2: 00:16:50 executing program 5: 00:16:50 executing program 3: 00:16:50 executing program 0: 00:16:50 executing program 4: 00:16:50 executing program 1: 00:16:51 executing program 5: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 0: 00:16:51 executing program 1: 00:16:51 executing program 3: 00:16:51 executing program 5: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 1: 00:16:51 executing program 0: 00:16:51 executing program 5: 00:16:51 executing program 3: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 1: 00:16:51 executing program 0: 00:16:51 executing program 1: 00:16:51 executing program 3: 00:16:51 executing program 5: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 2: 00:16:51 executing program 3: 00:16:51 executing program 0: 00:16:51 executing program 4: 00:16:51 executing program 5: 00:16:51 executing program 1: 00:16:51 executing program 3: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 5: 00:16:51 executing program 0: 00:16:51 executing program 1: 00:16:51 executing program 2: 00:16:51 executing program 4: 00:16:51 executing program 5: 00:16:51 executing program 3: 00:16:51 executing program 1: 00:16:52 executing program 2: 00:16:52 executing program 0: 00:16:52 executing program 4: 00:16:52 executing program 5: 00:16:52 executing program 3: 00:16:52 executing program 1: 00:16:52 executing program 2: 00:16:52 executing program 0: 00:16:52 executing program 4: 00:16:52 executing program 3: 00:16:52 executing program 5: 00:16:52 executing program 1: 00:16:52 executing program 2: 00:16:52 executing program 0: 00:16:52 executing program 3: 00:16:52 executing program 5: 00:16:52 executing program 4: 00:16:52 executing program 2: 00:16:52 executing program 0: 00:16:52 executing program 1: 00:16:52 executing program 3: 00:16:52 executing program 4: 00:16:52 executing program 1: 00:16:52 executing program 5: 00:16:52 executing program 0: 00:16:52 executing program 2: 00:16:52 executing program 3: 00:16:52 executing program 1: 00:16:52 executing program 5: 00:16:52 executing program 4: 00:16:52 executing program 2: 00:16:52 executing program 0: 00:16:52 executing program 1: 00:16:52 executing program 3: 00:16:52 executing program 0: 00:16:52 executing program 5: 00:16:52 executing program 4: 00:16:52 executing program 2: 00:16:52 executing program 3: 00:16:52 executing program 1: 00:16:53 executing program 5: 00:16:53 executing program 0: 00:16:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:16:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x2f8, 0x98, 0x0, 0x260, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1000}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:16:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@grpquota='grpquota'}, {@errors_remount='errors=remount-ro'}, {@integrity='integrity'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@uid_eq={'uid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:16:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 00:16:53 executing program 5: 00:16:53 executing program 0: [ 132.569514][ T8295] jfs: Unrecognized mount option "pcr=00000000000000000008" or missing value [ 132.572365][ T8299] x_tables: duplicate underflow at hook 1 [ 132.677620][ T8305] jfs: Unrecognized mount option "pcr=00000000000000000008" or missing value [ 132.731932][ C1] hrtimer: interrupt took 28978 ns [ 132.754216][ T8310] NFS: Device name not specified 00:16:53 executing program 2: pipe(&(0x7f0000000000)) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) 00:16:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x20fc, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) 00:16:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="ff0f52123b6230c7413c38e9f08b37b53ca2ee9e9b173de9eaacb112dbb7ff073fa592f1368aa16545fd5946d5b0a47997", 0x31}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1}}], 0x2, 0x0, 0x0) 00:16:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@grpquota='grpquota'}, {@errors_remount='errors=remount-ro'}, {@integrity='integrity'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@uid_eq={'uid'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 132.885317][ T8299] x_tables: duplicate underflow at hook 1 [ 133.064377][ T8328] jfs: Unrecognized mount option "pcr=00000000000000000008" or missing value [ 133.206219][ T29] audit: type=1800 audit(1592612213.799:2): pid=8319 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15820 res=0 00:16:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x20fc, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:53 executing program 4: 00:16:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0xb9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0) open(0x0, 0x5010c2, 0x1fa) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 00:16:54 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) 00:16:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:16:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)) set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x2) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00\xddu\x8b\x95\x9c#\xa4\x13\x1e\x04G}\xa8\xeb\xf7\xcf\xbfT\xbf7\x108\x8d\x16\xe7\x91=\x90\xe6J\x8c\xad\x81\xf3\xb8i\x1b\x96=0\xf0,\xea\x03-\x15j\bQA\x92#\xdcF\x03i\x90x\xd3\xffY\x15]\x00\xd4\xc0\xcf\xc0\xebu\xdb\xc3o\xc1\xadu\xa6\xd69Wi\x17\xa6\x0e\xd65\xa0\xe6\"\xc9\xa3V\xbe`\xceV\xc0\xef\xc4\xe8\xbd\x81\xe6\xca\x0etQ\x8b .t\x01\'1o\xe4\x03SY\xc8U\xfbW\x9cG\x8dM\xbcn\xc2\'Y\r\xbc/\xfe\xfeh\x84}\xaef\x87x\xf3Ob\x1b\x85\x8a*{\x1d', 0x0) ftruncate(r1, 0x1000000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101202, 0x0) sendfile(r2, r1, 0x0, 0xeefffdef) [ 133.754889][ T8366] x_tables: duplicate underflow at hook 2 00:16:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:16:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x20fc, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x20fc, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) [ 134.637299][ T29] audit: type=1800 audit(1592612215.229:3): pid=8373 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15831 res=0 00:16:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 134.732342][ T8400] NFS: Device name not specified 00:16:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 134.802614][ T8404] x_tables: duplicate underflow at hook 2 00:16:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x9}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) eventfd(0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:16:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) open(&(0x7f00000000c0)='./bus\x00', 0x20fc, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) [ 134.984524][ T8417] NFS: Device name not specified [ 134.996751][ T8416] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 135.401625][ T8442] NFS: Device name not specified [ 135.717131][ T8461] kvm: emulating exchange as write 00:16:56 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:16:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 135.895373][ T8479] x_tables: duplicate underflow at hook 2 00:16:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:58 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:16:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 138.086708][ T8517] x_tables: duplicate underflow at hook 2 00:16:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:16:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:16:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:16:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) [ 139.345019][ T8574] x_tables: duplicate underflow at hook 2 00:17:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0xfff9}, 0x7) sysinfo(&(0x7f00000007c0)=""/142) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) syz_genetlink_get_family_id$batadv(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 00:17:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:01 executing program 3: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:17:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) fchown(0xffffffffffffffff, r4, r7) fsync(r3) 00:17:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 140.499024][ T8639] x_tables: duplicate underflow at hook 2 00:17:01 executing program 3: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 00:17:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) fchown(0xffffffffffffffff, r3, r6) 00:17:01 executing program 3: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 141.030376][ T8678] NFS: Device name not specified [ 141.316624][ T8698] NFS: Device name not specified 00:17:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:17:02 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:02 executing program 4: socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) 00:17:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) [ 141.573167][ T8714] x_tables: duplicate underflow at hook 2 00:17:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:02 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 00:17:02 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', 0x0, 0x0) [ 142.230265][ T8759] FAT-fs (loop4): bogus number of FAT sectors [ 142.245965][ T8759] FAT-fs (loop4): Can't find a valid FAT filesystem 00:17:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:17:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 00:17:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) socket$rds(0x15, 0x5, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) 00:17:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) [ 142.423072][ T8759] FAT-fs (loop4): bogus number of FAT sectors [ 142.454317][ T8759] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.461923][ T8779] x_tables: duplicate underflow at hook 2 00:17:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000000000002) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) 00:17:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:03 executing program 4: perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:17:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:03 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 00:17:03 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) 00:17:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="7fe6aff57bb6d79b88e02f9e8101a1e302fdf18f479a3b09deed737098ddc5e540e8b85dee55d2c893d3be7ca1c96914c3356304762a0bb6a4d8d8e9d0243e", 0x3f}], 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e61965307fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='syz_tun\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x102}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) 00:17:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3cee146b667380666174000204010002000270fff8ea", 0x17}], 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004a40)='./file0/file0\x00', &(0x7f0000004a80), 0x0) 00:17:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:17:04 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 143.375044][ T8836] FAT-fs (loop3): bogus number of reserved sectors [ 143.412095][ T8836] FAT-fs (loop3): Can't find a valid FAT filesystem [ 143.450745][ T8834] ------------[ cut here ]------------ [ 143.456305][ T8834] WARNING: CPU: 0 PID: 8834 at arch/x86/kvm/x86.c:617 kvm_inject_emulated_page_fault+0x210/0x290 [ 143.463220][ T8846] x_tables: duplicate underflow at hook 2 [ 143.467412][ T8834] Kernel panic - not syncing: panic_on_warn set ... [ 143.467443][ T8834] CPU: 0 PID: 8834 Comm: syz-executor.4 Not tainted 5.7.0-rc7-next-20200529-syzkaller #0 [ 143.467453][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:17:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 143.467458][ T8834] Call Trace: [ 143.467480][ T8834] dump_stack+0x18f/0x20d [ 143.467504][ T8834] ? kvm_inject_emulated_page_fault+0x200/0x290 [ 143.467518][ T8834] panic+0x2e3/0x75c [ 143.467540][ T8834] ? __warn_printk+0xf3/0xf3 [ 143.523091][ T8834] ? printk+0xba/0xed [ 143.527979][ T8834] ? log_store.cold+0x16/0x16 [ 143.532853][ T8834] ? __warn.cold+0x14/0x3a [ 143.537688][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.544386][ T8834] __warn.cold+0x2f/0x3a 00:17:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 143.549347][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.556174][ T8834] report_bug+0x27b/0x2f0 [ 143.560636][ T8834] do_error_trap+0x153/0x2b0 [ 143.565516][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.571788][ T8834] exc_invalid_op+0x37/0x50 [ 143.576707][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.583422][ T8834] asm_exc_invalid_op+0x12/0x20 [ 143.588302][ T8834] RIP: 0010:kvm_inject_emulated_page_fault+0x210/0x290 00:17:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 143.595295][ T8834] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 79 48 8b 53 08 4c 89 f6 48 89 ef e8 da e7 0b 00 e9 10 ff ff ff e8 90 36 68 00 <0f> 0b e9 3a fe ff ff 4c 89 e7 e8 81 3f a7 00 e9 5d fe ff ff 48 89 [ 143.615100][ T8834] RSP: 0018:ffffc90001a87988 EFLAGS: 00010216 [ 143.621976][ T8834] RAX: 0000000000040000 RBX: ffffc90001a87a00 RCX: ffffc900119cb000 [ 143.630154][ T8834] RDX: 0000000000004ec6 RSI: ffffffff810ac510 RDI: 0000000000000001 [ 143.638147][ T8834] RBP: ffff888063948600 R08: ffff88806a958140 R09: ffffed100c719c82 [ 143.646135][ T8834] R10: ffff8880638ce40b R11: ffffed100c719c81 R12: 0000000000000000 [ 143.654143][ T8834] R13: 0000000000000001 R14: ffffc90001a87ad8 R15: ffff888063948940 [ 143.662316][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.668713][ T8834] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 143.674981][ T8834] nested_vmx_get_vmptr+0x1f9/0x2a0 [ 143.680204][ T8834] ? handle_invept+0x820/0x820 [ 143.685000][ T8834] ? vmx_segment_cache_test_set+0xc2/0x170 [ 143.691090][ T8834] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 143.696676][ T8834] ? nested_vmx_get_vmptr+0x2a0/0x2a0 00:17:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 143.702090][ T8834] handle_vmon+0x168/0x3a0 [ 143.706527][ T8834] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 143.711931][ T8834] ? lock_release+0x800/0x800 [ 143.717064][ T8834] ? mark_held_locks+0x9f/0xe0 [ 143.721868][ T8834] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 143.727268][ T8834] vmx_handle_exit+0x29c/0x1260 [ 143.732433][ T8834] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 143.738559][ T8834] kvm_arch_vcpu_ioctl_run+0x2147/0x68d0 [ 143.744253][ T8834] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 00:17:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd) write$P9_RATTACH(r0, 0x0, 0x0) [ 143.749821][ T8834] ? lock_downgrade+0x840/0x840 [ 143.754691][ T8834] ? rcu_read_lock_held_common+0xa0/0xa0 [ 143.760525][ T8834] ? check_preemption_disabled+0x38/0x220 [ 143.767574][ T8834] ? kvm_vcpu_ioctl+0x467/0xe10 [ 143.773291][ T8834] kvm_vcpu_ioctl+0x467/0xe10 [ 143.778203][ T8834] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 143.784731][ T8834] ? ioctl_file_clone+0x180/0x180 [ 143.790768][ T8834] ? check_preemption_disabled+0x38/0x220 [ 143.796818][ T8834] ? __fget_files+0x299/0x400 [ 143.801739][ T8834] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 143.808454][ T8834] ksys_ioctl+0x11a/0x180 [ 143.812975][ T8834] __x64_sys_ioctl+0x6f/0xb0 [ 143.817763][ T8834] do_syscall_64+0x60/0xe0 [ 143.822473][ T8834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 143.828526][ T8834] RIP: 0033:0x45ca59 [ 143.832788][ T8834] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 143.853202][ T8834] RSP: 002b:00007f1555051c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.861880][ T8834] RAX: ffffffffffffffda RBX: 00000000004e85a0 RCX: 000000000045ca59 [ 143.870007][ T8834] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 143.878390][ T8834] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 143.887247][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 143.895488][ T8834] R13: 00000000000003cc R14: 00000000004c6799 R15: 00007f15550526d4 [ 143.905524][ T8834] Kernel Offset: disabled [ 143.910448][ T8834] Rebooting in 86400 seconds..