[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 23.051396][ T8374] bash (8374) used greatest stack depth: 9992 bytes left Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. 2020/06/18 22:01:18 fuzzer started 2020/06/18 22:01:19 dialing manager at 10.128.0.105:45279 2020/06/18 22:01:19 syscalls: 3090 2020/06/18 22:01:19 code coverage: enabled 2020/06/18 22:01:19 comparison tracing: enabled 2020/06/18 22:01:19 extra coverage: enabled 2020/06/18 22:01:19 setuid sandbox: enabled 2020/06/18 22:01:19 namespace sandbox: enabled 2020/06/18 22:01:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/18 22:01:19 fault injection: enabled 2020/06/18 22:01:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/18 22:01:19 net packet injection: enabled 2020/06/18 22:01:19 net device setup: enabled 2020/06/18 22:01:19 concurrency sanitizer: enabled 2020/06/18 22:01:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/18 22:01:19 USB emulation: enabled 2020/06/18 22:01:23 suppressing KCSAN reports in functions: '__mod_timer' 'kcm_rfree' 'ext4_free_inodes_count' 'find_get_pages_range_tag' 'blk_mq_sched_dispatch_requests' '__find_get_block' 'alloc_pid' '__ext4_new_inode' '__xa_clear_mark' '__send_signal' 'futex_wait_queue_me' '__xa_set_mark' 'shmem_file_read_iter' 'direct_page_fault' 'shmem_unlink' 'pipe_lock' 'do_nanosleep' 'xas_clear_mark' 'pipe_double_lock' '__delete_from_page_cache' 'page_counter_charge' 'blk_mq_dispatch_rq_list' 'pcpu_alloc' 'lru_add_drain_all' 'ext4_mark_iloc_dirty' '__blkdev_put' 'do_syslog' 'vfs_readlink' 'kauditd_thread' 'expire_timers' 'blk_mq_rq_ctx_init' 'ext4_da_write_end' 'do_epoll_wait' 'generic_write_end' 'do_signal_stop' 'do_select' 'n_tty_receive_buf_common' 'snd_seq_check_queue' 'ext4_mb_good_group' 'ext4_free_inode' 'generic_file_buffered_read' 'ext4_mb_find_by_goal' 'shmem_mknod' 'snd_rawmidi_proceed' 'dec_zone_page_state' 'copy_process' 'dd_has_work' 'fsnotify' '__add_to_page_cache_locked' '__delayacct_blkio_end' 22:02:48 executing program 0: sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}, 0x8}], 0xc6, 0x0) sched_getscheduler(0x0) syzkaller login: [ 120.441252][ T8665] IPVS: ftp: loaded support on port[0] = 21 22:02:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 120.502743][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 120.535569][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.542625][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.550823][ T8665] device bridge_slave_0 entered promiscuous mode [ 120.558845][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.566451][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.573873][ T8665] device bridge_slave_1 entered promiscuous mode [ 120.590865][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.601771][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.621391][ T8665] team0: Port device team_slave_0 added [ 120.628440][ T8665] team0: Port device team_slave_1 added [ 120.642607][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.649935][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.676732][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.689009][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.696327][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.722843][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.739411][ T8819] IPVS: ftp: loaded support on port[0] = 21 22:02:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1d5d0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x60, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 120.815503][ T8665] device hsr_slave_0 entered promiscuous mode [ 120.884309][ T8665] device hsr_slave_1 entered promiscuous mode 22:02:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x400000000000000, 0x0, 0x0}) [ 120.980993][ T8833] IPVS: ftp: loaded support on port[0] = 21 [ 121.073347][ T8819] chnl_net:caif_netlink_parms(): no params data found [ 121.099578][ T8665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.142255][ T8665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.186056][ T8665] netdevsim netdevsim0 netdevsim2: renamed from eth2 22:02:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x36, 0x0, 0xffffffffffffff9c}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x36, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) dup2(r6, r3) [ 121.232637][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 121.242205][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 121.262328][ T8665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.351951][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.359027][ T8665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.366273][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.373342][ T8665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.433916][ T9115] IPVS: ftp: loaded support on port[0] = 21 [ 121.468410][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state 22:02:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc20380003a925c0fe6ce4eb20d96b7d8f03a0e429a88f28af65b93a913f2bd6b6d133b92449382fb7d63a8f3e480a75592a069d84c0c5660f3646a0493db6208fa6b64cec4e3c4c54bd11df5b51fde769cc6d3e80e8fcb2835659292c52d2dc7cdc7640742258d73797897fe9e2570112fc88f4c679447d02194f9c7d2f94d52f02909586de9f38b4e8db877125e7fedaa50effdc254cf3b626103947f53df08167cbec744ba38444396a4bf37d312166f3a377335abc71dfe21698abb868497e24dabf21"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x1000}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c8, 0x0, 0x0, 0x1}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0xcdf2, 0x0, 0x2, 0xcb}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r2}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20040004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) get_robust_list(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3f, 0x62, 0x3f, 0x1f, 0x0, 0x8, 0x1c655, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1, 0x800a8, 0x7, 0x2, 0x9, 0x8}, r3, 0x3, r5, 0xe) [ 121.479880][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.487680][ T8819] device bridge_slave_0 entered promiscuous mode [ 121.524613][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.531677][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.540456][ T8833] device bridge_slave_0 entered promiscuous mode [ 121.553557][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.561588][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.584117][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.591418][ T8819] device bridge_slave_1 entered promiscuous mode [ 121.625552][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.632580][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.640625][ T8833] device bridge_slave_1 entered promiscuous mode [ 121.647827][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.655694][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.663786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 121.681987][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.693632][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.694811][ T9203] IPVS: ftp: loaded support on port[0] = 21 [ 121.715673][ T8819] team0: Port device team_slave_0 added [ 121.724513][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 121.737653][ T8819] team0: Port device team_slave_1 added [ 121.760023][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.767744][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.783698][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.795736][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.806027][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.824213][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.831220][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.857637][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.869663][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.876838][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.903221][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.933200][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.941713][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.950368][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.957407][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.965268][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.973602][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.981827][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.989731][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.005375][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.012435][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.021527][ T9040] device bridge_slave_0 entered promiscuous mode [ 122.029144][ T8833] team0: Port device team_slave_0 added [ 122.039498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.095781][ T8819] device hsr_slave_0 entered promiscuous mode [ 122.154595][ T8819] device hsr_slave_1 entered promiscuous mode [ 122.214297][ T8819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.221872][ T8819] Cannot create hsr debugfs directory [ 122.227407][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.235272][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.242654][ T9040] device bridge_slave_1 entered promiscuous mode [ 122.253724][ T8833] team0: Port device team_slave_1 added [ 122.278714][ T9203] chnl_net:caif_netlink_parms(): no params data found [ 122.288795][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 122.311441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.321275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.329959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.342608][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.354950][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.372639][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.390443][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.398710][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.407677][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.416005][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.427450][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.435371][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.461976][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.484257][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.491221][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.517267][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.552572][ T9203] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.559985][ T9203] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.567827][ T9203] device bridge_slave_0 entered promiscuous mode [ 122.579169][ T9040] team0: Port device team_slave_0 added [ 122.588176][ T9040] team0: Port device team_slave_1 added [ 122.593788][ T8665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.605153][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.613428][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.621629][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.632553][ T9203] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.639818][ T9203] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.647360][ T9203] device bridge_slave_1 entered promiscuous mode [ 122.705769][ T8833] device hsr_slave_0 entered promiscuous mode [ 122.734503][ T8833] device hsr_slave_1 entered promiscuous mode [ 122.774150][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.781717][ T8833] Cannot create hsr debugfs directory [ 122.801764][ T9203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.825794][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.832850][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.840425][ T9115] device bridge_slave_0 entered promiscuous mode [ 122.848532][ T9203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.857939][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.864877][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.890750][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.912700][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.919869][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.927518][ T9115] device bridge_slave_1 entered promiscuous mode [ 122.937255][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.945447][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.972023][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.988820][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.996825][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.004685][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.012265][ T8819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.036668][ T8819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.098729][ T8819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.148741][ T8819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.225703][ T9040] device hsr_slave_0 entered promiscuous mode [ 123.254653][ T9040] device hsr_slave_1 entered promiscuous mode [ 123.294141][ T9040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.301699][ T9040] Cannot create hsr debugfs directory [ 123.320616][ T9203] team0: Port device team_slave_0 added [ 123.349547][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.360405][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.370926][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.379551][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.388692][ T9203] team0: Port device team_slave_1 added [ 123.421400][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.428625][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.455290][ T9203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.470605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.479417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.490830][ T8833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.555876][ T8833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.595981][ T8833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.636274][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.643215][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.669566][ T9203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.681008][ T9115] team0: Port device team_slave_0 added [ 123.688646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.696215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.705595][ T8665] device veth0_vlan entered promiscuous mode [ 123.712430][ T8833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.773170][ T9115] team0: Port device team_slave_1 added [ 123.788124][ T8665] device veth1_vlan entered promiscuous mode [ 123.836464][ T9203] device hsr_slave_0 entered promiscuous mode [ 123.884468][ T9203] device hsr_slave_1 entered promiscuous mode [ 123.924128][ T9203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.931668][ T9203] Cannot create hsr debugfs directory [ 123.943946][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.951130][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.977367][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.990083][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.997114][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.023330][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.044867][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.052679][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.065301][ T9040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.131041][ T8665] device veth0_macvtap entered promiscuous mode [ 124.143350][ T8665] device veth1_macvtap entered promiscuous mode [ 124.150681][ T9040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.185488][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.193762][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.202235][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.210000][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.275827][ T9115] device hsr_slave_0 entered promiscuous mode [ 124.324332][ T9115] device hsr_slave_1 entered promiscuous mode [ 124.364340][ T9115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.371921][ T9115] Cannot create hsr debugfs directory [ 124.396856][ T9040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.467246][ T9040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.501351][ T9203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.556053][ T9203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.600331][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.616725][ T9203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.636357][ T9203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.686362][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.695160][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.711986][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.720593][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.735801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.744886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.785595][ T9115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.827440][ T9115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.878502][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.936995][ T9115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.985943][ T9115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.055561][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.063092][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.075773][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.134885][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.143382][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.157705][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.193986][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.205021][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.213281][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.220317][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.228760][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 22:02:52 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x30) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 125.237139][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.245423][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.252520][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.262204][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.270922][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.280678][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.287724][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.296838][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.305441][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.313872][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.320913][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.331561][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.340831][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.386692][ T8833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.397454][ T8833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.409911][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.417588][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.425259][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.435374][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.443920][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.452428][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.460964][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.469514][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.477938][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.486173][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.494355][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.502652][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.511193][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.519322][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.527383][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.535726][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.544036][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.552212][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.560363][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.568206][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.575803][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.587400][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.602495][ T8819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.613182][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.631399][ T9203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.644933][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.653160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.662248][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.670125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.682838][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.696506][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.703950][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.712933][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.721000][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.734273][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.741704][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.759476][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.767271][ T9203] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.777025][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.784903][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.792423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.800742][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.808490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.817152][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.830084][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.856509][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.865583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.873715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.880732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.888470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.896961][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.905166][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.912168][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.919765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.928110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.936315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.943348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.951126][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.959657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.967863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.974927][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.982541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.991257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.000030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.008532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.016941][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.023941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.032757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.041361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.049568][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.056633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.064447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.073031][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.081123][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.090113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.098029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 22:02:53 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x30) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 126.105971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.113689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.121532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.136551][ T8833] device veth0_vlan entered promiscuous mode [ 126.149077][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.158179][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.168350][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.198355][ T8833] device veth1_vlan entered promiscuous mode [ 126.206870][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.224825][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.232959][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.254744][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.263267][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.273837][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.282344][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.290528][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.299099][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.307263][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.315898][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.324641][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.341056][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.352099][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.373612][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.382416][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.391060][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.399781][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.408336][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.416871][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.425282][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.433755][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.442167][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.450386][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.458826][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.467195][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.475887][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.483903][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.491862][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.499355][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.508698][ T9203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.527829][ T8819] device veth0_vlan entered promiscuous mode [ 126.536582][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.546016][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.554804][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.562834][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.576264][ T8819] device veth1_vlan entered promiscuous mode [ 126.589593][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.596970][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.604878][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.612608][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.620494][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.629427][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.643699][ T9203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.654968][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.663551][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.671833][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.679296][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.688411][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.697051][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.714130][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.728959][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.739890][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.748450][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.757292][ T8833] device veth0_macvtap entered promiscuous mode [ 126.773346][ T8819] device veth0_macvtap entered promiscuous mode [ 126.783222][ T8833] device veth1_macvtap entered promiscuous mode [ 126.799534][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.808402][ T8819] device veth1_macvtap entered promiscuous mode [ 126.818878][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.831385][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.842265][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.857780][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 126.868251][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.879054][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.886632][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.895131][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.902996][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.911141][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.918842][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.927297][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.936002][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.944332][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:02:54 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x30) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 126.965031][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.976843][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.987133][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 126.998153][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.009291][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.025566][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.034364][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.046067][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.054808][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.070255][ T9040] device veth0_vlan entered promiscuous mode [ 127.107377][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.118185][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.128532][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 127.138960][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.149908][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.166050][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.174870][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.183824][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.193778][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.202474][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.212697][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.221338][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.230681][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.368776][ T9954] device batadv0 entered promiscuous mode [ 127.416688][ T9954] device batadv0 left promiscuous mode [ 127.505169][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.513153][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.523105][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.531927][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.546509][ T9040] device veth1_vlan entered promiscuous mode [ 127.552951][ T9115] device veth0_vlan entered promiscuous mode [ 127.626979][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.634522][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.644476][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.652434][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.695524][ T9959] device batadv0 entered promiscuous mode [ 127.735480][ T9959] device batadv0 left promiscuous mode 22:02:55 executing program 0: futex(&(0x7f0000000080), 0x800000000007, 0x0, 0x0, 0x0, 0x0) [ 127.874982][ T9203] device veth0_vlan entered promiscuous mode [ 127.908709][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 22:02:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r0, &(0x7f0000009780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 127.918852][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.932132][ T9115] device veth1_vlan entered promiscuous mode [ 127.947691][ T9203] device veth1_vlan entered promiscuous mode 22:02:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 22:02:55 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/219, 0x2b, 0xdb, 0x8}, 0x20) [ 127.977741][ T9970] binder: BINDER_SET_CONTEXT_MGR already set [ 127.984000][ T9970] binder: 9969:9970 ioctl 40046207 0 returned -16 [ 127.996151][ T9974] binder: BINDER_SET_CONTEXT_MGR already set [ 128.002109][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.011187][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.020986][ T9974] binder: 9969:9974 ioctl 40046207 0 returned -16 22:02:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 128.028081][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.053129][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.068422][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.081448][ T9983] BPF:[1] FWD [ 128.095532][ T9040] device veth0_macvtap entered promiscuous mode [ 128.104001][ T9983] BPF:struct [ 128.113702][ T9984] BPF:[1] FWD 22:02:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 128.128277][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.137399][ T9983] BPF: [ 128.140176][ T9984] BPF:struct [ 128.143466][ T9983] BPF:Invalid name [ 128.150012][ T9984] BPF: [ 128.153442][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.161704][ T9983] BPF: [ 128.161704][ T9983] [ 128.168249][ T9984] BPF:Invalid name [ 128.172179][ T9984] BPF: [ 128.172179][ T9984] [ 128.191318][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.209047][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.236773][ T9040] device veth1_macvtap entered promiscuous mode [ 128.246352][ T9115] device veth0_macvtap entered promiscuous mode [ 128.257122][ T9203] device veth0_macvtap entered promiscuous mode [ 128.267939][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.277381][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.286520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.298636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.307807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.326079][ T9115] device veth1_macvtap entered promiscuous mode [ 128.336497][ T9203] device veth1_macvtap entered promiscuous mode [ 128.356116][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.368284][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.379449][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.390427][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.400785][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.411911][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.423186][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.440070][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.460762][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.471834][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.482317][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.493719][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.504934][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.515040][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.526006][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.536852][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.544477][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.552951][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.562147][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.570812][ T9252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.584708][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.596989][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.607091][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.617670][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.627534][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.638026][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.647844][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.658268][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.668258][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 128.679060][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.689721][ T9203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.698684][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.710898][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.721005][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.731423][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.741241][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.751948][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.762492][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.771569][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.782856][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.792933][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.803714][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.813820][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.826347][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.836396][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.847033][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.857768][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.865602][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.873942][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.883405][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.891899][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.901537][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.910378][ T3403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.923107][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.935474][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.945582][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.956045][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.965895][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.976454][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.986423][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.996893][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.006715][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.017220][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.027855][ T9203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.038899][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.047477][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:02:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 129.533907][T10017] binder: 10016:10017 ioctl c0306201 20000280 returned -14 22:02:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc20380003a925c0fe6ce4eb20d96b7d8f03a0e429a88f28af65b93a913f2bd6b6d133b92449382fb7d63a8f3e480a75592a069d84c0c5660f3646a0493db6208fa6b64cec4e3c4c54bd11df5b51fde769cc6d3e80e8fcb2835659292c52d2dc7cdc7640742258d73797897fe9e2570112fc88f4c679447d02194f9c7d2f94d52f02909586de9f38b4e8db877125e7fedaa50effdc254cf3b626103947f53df08167cbec744ba38444396a4bf37d312166f3a377335abc71dfe21698abb868497e24dabf21"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x1000}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c8, 0x0, 0x0, 0x1}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0xcdf2, 0x0, 0x2, 0xcb}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r2}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20040004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) get_robust_list(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3f, 0x62, 0x3f, 0x1f, 0x0, 0x8, 0x1c655, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1, 0x800a8, 0x7, 0x2, 0x9, 0x8}, r3, 0x3, r5, 0xe) 22:02:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() setgroups(0x1, &(0x7f0000000040)=[0x0]) 22:02:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0), 0x4) 22:02:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x5}, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x20202) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x73c9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 22:02:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 129.579235][T10023] NFS: mount program didn't pass remote address 22:02:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc20380003a925c0fe6ce4eb20d96b7d8f03a0e429a88f28af65b93a913f2bd6b6d133b92449382fb7d63a8f3e480a75592a069d84c0c5660f3646a0493db6208fa6b64cec4e3c4c54bd11df5b51fde769cc6d3e80e8fcb2835659292c52d2dc7cdc7640742258d73797897fe9e2570112fc88f4c679447d02194f9c7d2f94d52f02909586de9f38b4e8db877125e7fedaa50effdc254cf3b626103947f53df08167cbec744ba38444396a4bf37d312166f3a377335abc71dfe21698abb868497e24dabf21"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x1000}, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c8, 0x0, 0x0, 0x1}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0xcdf2, 0x0, 0x2, 0xcb}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9, r2}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20040004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1802}, 0x1c) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) get_robust_list(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000082b00fe8000000000000090e547f52250a65e5400000000000000aafe80000000000000eb000000000000aa87000068d33e3b7ff8df33be4fed859b7672ca8537c3e9ef51d2cbb505e259e651fe9e84246feb582fa0ab34e6185d50ae95235a79157b2bee14c0a0ff8990538db3b6c922bc320c813d001e161fddd042c6ba39cef70a49df1245887c4b0989321fecbc90a47b5cec5870c2209a6d64cf9c67ab3b502a16a828139ab856f6194ca1ea0a9723371109ad200f269d0047588bf9325b4c09b4fadb3405315ebd3f7ac85693f1b96dede7ec3043dc73818c3c6f95778790cd186581177fe49d982394a8a11bd8bf9a2d2fb4e7c61354207b2b34a996e399e8d0c952928da4f53030ea931014ebf012bdbeda263abaa7542c83e4abe76edc7bf371043d9a727aba4c3c0b2abe18ed6955d28e7e7ef887d814e20a7f27b113d9d2fff8d76b22a544d4"], 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3f, 0x62, 0x3f, 0x1f, 0x0, 0x8, 0x1c655, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1, 0x800a8, 0x7, 0x2, 0x9, 0x8}, r3, 0x3, r5, 0xe) 22:02:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000480)='\\tt\xd4\xef\f/\x84PFo\x97\xc1*\x970?\'`@{N\x01\xb5\xf7>\xe0\xd5\x84\x03\xf8\xc9\xee\x1b\xdd\xa9\xe1\x0f\x00\x00GS\v\xba\xed\xb11\x7f\x81\xc5\x1fnis\xe2\xf1\x1c1\x1b|%g\xc3\x13\xc2\xdf-\xeah\xb8\x9e]\r\xb4y\xfd\x88>\xde\x11\x8b|j\xb3\x98\xe3\xbf\xf5\"\xfa0\xa8\xb7\xdd\x8e\xd6\x91.u\xc8D\xb5\xe40+\xef\xf2\x11\x00\x00\x00x\xd7\xfe\xa3\x18n\x9dYbsoF\xd4x\xf7\xd4\xa3tR\x7f\x8e\xa0_jQ\x92\xc9:\xfc|TGE\xd1f\xd4\xe3\xaf\xfdE\xb4\xe9\f\xf1;\x13=\xa6\x83\xac;\x0e*\xcbs,\xd0\xec{!p\x9c\xc9\x1d\xd0\x9d\x06\xe05\x1fw\xc5\xa46\xc8 |\xe9E+\xe5\f\xd9\xd5\xa9\x8e\xf7\x9f\xa0\xb5k|\x1b\xd4=2\xf6>\x83`\x10\xd3@\xf7I\x84\xa4\x94\x87\a\xc5CF\xb4\x84\x96\xa9\xad\xaa8\xd9Am\x14b@O\\\xef\x14\xe9Y\xb6\x83\x8a\xf5\xa2\xd4Q\xf7\xc4If]\xf0\t\xfc\x0ft@\x14\xc1\x85P9\xd8]\xe6\xd3\x94z\xab\xa4\xdeJ\xbd#\xd7X4\xc1N?\x96\x05\x96\xa2\xf46\x00WI\xc08+\b\xe1\x1dvn\xaa\x88\xe7@\xa9i>\xa9\xab\xa9U\x8b\x8dLB\xda9\xec\xc9Z\xb7f\x9d\x9b-y\xd9\xee)\xca6\x8a.\x01\xcam#\x13\xbf\xe7\x19.N\x869o\f\xd2\xb1\xd4\xce\x835.\xa9;\xc3\xd7\v\x11f\x91\x9e\n&|\x87\xc4\xfb\x83\x1e\xe7\"\xf2m3\xfd\xa9\x98\xeaM$Iur\xa3\xa65\x82\x12\x85\xc7.\r\xd2\xa6\x95}\xec\x98\x9d\xc0\x86\xfa\x00\xc0H\xcd\xb4I\x9aF\xd7\xce?\xe3Q\x18\x7f\xf2xGany\xaa\xcb\x1f\x87\xfe\xff\xf4\x8cw\x9d_b\xe6\x1f%\xb7Y\xc9u\x9c\x9fF\xf5\x90\xb4\x1f\xdfU\xa3\x19\xdd\xe1\xfe\xc4\xba^\xf8\x80b\x04\x9av\x0en\x96\x86\xab\x9e_\xe5\xef\x98Q\xb58I\x88\xa6!\x80p\x1f\xf5n\x9d\xec+\xa8\xb4`L\x18\xe4XP@\xde\"\"l\x92^\xd1K\xcd\xfd\x19\x93\x91\'\xab\xeb\t\xdb\xe7\x89RWV\xeb\xf7b\x06\xa6\xe3M\x7f\xd1g\xde\xe3\xbf-\t+Zu`m\xee\xc8\x19\v\xa7\x00'/565, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xeefffdef) poll(&(0x7f00000000c0)=[{r0, 0x580}], 0x1, 0x0) 22:02:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:02:57 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 129.744202][T10035] block nbd4: shutting down sockets 22:02:57 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) 22:02:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 129.784698][T10053] NFS: mount program didn't pass remote address [ 129.806552][T10035] block nbd4: shutting down sockets [ 129.872488][T10067] NFS: mount program didn't pass remote address 22:02:58 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x37cb1133) socket$inet(0x2, 0x3, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 22:02:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x5}, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x20202) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x73c9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 22:02:58 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) llistxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000480)=""/157, 0x9d) 22:02:58 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setregid(0x0, 0x0) setgroups(0x1, &(0x7f0000000040)=[0x0]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:02:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:58 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:02:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:02:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000140)={@flat=@handle={0x66642a85}, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) [ 130.574100][T10083] block nbd4: shutting down sockets 22:02:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:02:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:02:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$unix(0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(r1, r1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) [ 130.654479][T10100] NFS: Device name not specified [ 130.661231][T10106] binder: 10103:10106 ioctl c0306201 20000780 returned -14 22:02:58 executing program 4: [ 130.697654][T10104] binder: 10102:10104 ioctl c0306201 20000780 returned -14 22:02:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 130.738652][T10111] binder: 10110:10111 ioctl c018620c 20000140 returned -22 [ 130.771027][T10117] NFS: Device name not specified 22:02:58 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:02:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:02:58 executing program 4: [ 130.783567][T10121] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 130.800727][T10124] binder: 10115:10124 ioctl c0306201 20000780 returned -14 22:02:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$unix(0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(r1, r1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) 22:02:58 executing program 4: [ 130.863152][T10133] NFS: mount program didn't pass remote address [ 130.899549][T10140] binder: 10136:10140 ioctl c018620c 20000140 returned -22 22:02:58 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 130.903285][T10138] binder: 10134:10138 ioctl c0306201 20000780 returned -14 22:02:58 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:02:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) [ 130.978225][T10145] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 131.033716][T10148] NFS: mount program didn't pass remote address [ 131.073982][T10153] binder: 10149:10153 ioctl c0306201 20000780 returned -14 [ 131.084915][T10154] binder: 10150:10154 ioctl c018620c 20000140 returned -22 22:02:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:02:59 executing program 4: 22:02:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:02:59 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:59 executing program 5: 22:02:59 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:02:59 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x8006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x0, 0x84) ioprio_set$pid(0x0, 0x0, 0x0) 22:02:59 executing program 4: 22:02:59 executing program 3: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:59 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) [ 131.612021][T10179] NFS: mount program didn't pass remote address [ 131.635961][T10182] binder: 10178:10182 ioctl c0306201 20000780 returned -14 [ 131.646887][T10184] binder: 10181:10184 ioctl c018620c 20000140 returned -22 22:02:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:02:59 executing program 3: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 131.788539][T10198] binder: 10195:10198 ioctl c0306201 20000780 returned -14 [ 131.790152][T10197] binder: 10194:10197 ioctl c018620c 20000140 returned -22 [ 131.894049][ C0] hrtimer: interrupt took 16462 ns 22:03:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:03:00 executing program 4: 22:03:00 executing program 3: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:00 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:00 executing program 5: 22:03:00 executing program 3: mkdir(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:00 executing program 3: mkdir(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:00 executing program 4: 22:03:00 executing program 5: 22:03:00 executing program 3: mkdir(0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:00 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) [ 132.480381][T10225] binder: 10220:10225 ioctl c018620c 20000140 returned -22 [ 132.480942][T10223] binder: 10219:10223 ioctl c0306201 20000780 returned -14 [ 132.608594][T10241] binder: 10237:10241 ioctl c018620c 20000140 returned -22 22:03:00 executing program 5: 22:03:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:03:00 executing program 4: 22:03:00 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:00 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:01 executing program 5: 22:03:01 executing program 4: 22:03:01 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 133.335763][T10254] NFS: mount program didn't pass remote address [ 133.337774][T10259] binder: 10256:10259 ioctl c018620c 20000140 returned -22 [ 133.365358][T10261] binder_alloc: 10257: binder_alloc_buf, no vma 22:03:01 executing program 5: 22:03:01 executing program 5: [ 133.389120][T10261] binder: 10257:10261 ioctl c0306201 20000780 returned -14 22:03:01 executing program 4: 22:03:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) [ 133.459862][T10267] binder: 10266:10267 ioctl c018620c 20000140 returned -22 [ 133.493563][T10270] NFS: mount program didn't pass remote address [ 133.539333][T10277] binder_alloc: 10275: binder_alloc_buf, no vma [ 133.553629][T10277] binder: 10275:10277 ioctl c0306201 20000780 returned -14 22:03:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:01 executing program 5: 22:03:01 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:03:01 executing program 4: 22:03:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:01 executing program 4: 22:03:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:01 executing program 5: 22:03:01 executing program 4: [ 134.207679][T10295] binder: 10290:10295 ioctl c018620c 20000140 returned -22 [ 134.211852][T10293] NFS: mount program didn't pass remote address [ 134.216246][T10296] binder_alloc: 10292: binder_alloc_buf, no vma 22:03:01 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:01 executing program 5: 22:03:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100000}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:03:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 134.270527][T10296] binder: 10292:10296 ioctl c0306201 20000780 returned -14 [ 134.321804][T10303] NFS: Device name not specified [ 134.357453][T10308] binder: 10305:10308 ioctl c018620c 20000140 returned -22 [ 134.403556][T10314] ptrace attach of "/root/syz-executor.4"[10312] was attempted by "/root/syz-executor.4"[10314] [ 134.416774][T10315] NFS: Device name not specified 22:03:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:03:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:02 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) 22:03:02 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000180)='./file0\x00') syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 22:03:02 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:02 executing program 4: r0 = socket$inet(0x2, 0xa, 0x40) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x318, 0x0, 0x1e8, 0x140, 0x1e8, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x11, @local, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r3 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0xb0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000180)) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r5 = gettid() fcntl$setown(r4, 0x8, r5) 22:03:02 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:03:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:02 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) [ 135.070400][T10335] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 135.077424][T10337] binder: 10326:10337 ioctl c018620c 20000140 returned -22 [ 135.094507][T10336] binder: 10329:10336 ioctl c0306201 20000780 returned -14 22:03:02 executing program 4: r0 = socket$inet(0x2, 0xa, 0x40) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x318, 0x0, 0x1e8, 0x140, 0x1e8, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x11, @local, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r3 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0xb0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000180)) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r5 = gettid() fcntl$setown(r4, 0x8, r5) [ 135.120683][T10341] binder_alloc: 10328: binder_alloc_buf, no vma [ 135.154646][T10347] binder: 10345:10347 ioctl c0306201 20000780 returned -14 [ 135.174492][T10342] ldm_validate_privheads(): Disk read failed. [ 135.187445][T10342] loop5: p2 < > p4 [ 135.195722][T10342] loop5: partition table partially beyond EOD, truncated [ 135.207441][T10342] loop5: p2 size 2 extends beyond EOD, truncated [ 135.214584][T10342] loop5: p4 size 2097152 extends beyond EOD, truncated 22:03:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000140)={@flat=@handle, @flat=@weak_binder, @fda}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x2, 0x0, 0x0}) 22:03:02 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) [ 135.215398][T10352] NFS: Device name not specified [ 135.226537][T10355] binder: 10351:10355 ioctl c018620c 20000140 returned -22 [ 135.274539][T10364] binder: 10363:10364 ioctl c0306201 20000780 returned -14 [ 135.305597][T10366] binder: 10365:10366 ioctl c018620c 20000140 returned -1 22:03:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22:03:03 executing program 4: r0 = socket$inet(0x2, 0xa, 0x40) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x318, 0x0, 0x1e8, 0x140, 0x1e8, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x11, @local, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @icmp_id}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) unshare(0x8000400) r3 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0xb0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(r3, 0x0, &(0x7f0000000180)) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) r5 = gettid() fcntl$setown(r4, 0x8, r5) 22:03:03 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 135.886968][T10385] NFS: Device name not specified [ 135.930643][T10381] ldm_validate_privheads(): Disk read failed. [ 135.944460][T10381] loop5: p2 < > p4 [ 135.948310][T10381] loop5: partition table partially beyond EOD, truncated [ 135.960329][T10381] loop5: p2 size 2 extends beyond EOD, truncated [ 135.968716][T10381] loop5: p4 size 2097152 extends beyond EOD, truncated [ 135.977654][T10394] binder_alloc: 10389: binder_alloc_buf, no vma [ 172.984256][ T0] NOHZ: local_softirq_pending 08 [ 212.663285][ T0] NOHZ: local_softirq_pending 08 [ 246.577771][ T0] ================================================================== [ 246.585850][ T0] BUG: KCSAN: data-race in tick_nohz_next_event / tick_nohz_stop_tick [ 246.594004][ T0] [ 246.596307][ T0] write to 0xffffffff87f50650 of 4 bytes by task 0 on cpu 0: [ 246.603766][ T0] tick_nohz_stop_tick+0xa0/0x440 [ 246.608758][ T0] tick_nohz_idle_stop_tick+0xf2/0x1c0 [ 246.614193][ T0] do_idle+0x1ac/0x320 [ 246.618238][ T0] cpu_startup_entry+0x15/0x20 [ 246.622971][ T0] rest_init+0xd8/0xe0 [ 246.627014][ T0] arch_call_rest_init+0xa/0xb [ 246.631797][ T0] start_kernel+0x608/0x6d0 [ 246.636273][ T0] secondary_startup_64+0xa4/0xb0 [ 246.641699][ T0] [ 246.644000][ T0] read to 0xffffffff87f50650 of 4 bytes by task 0 on cpu 1: [ 246.651248][ T0] tick_nohz_next_event+0x21d/0x310 [ 246.656420][ T0] tick_nohz_get_sleep_length+0xca/0x140 [ 246.662026][ T0] menu_select+0x328/0x1030 [ 246.666510][ T0] cpuidle_select+0x3d/0x50 [ 246.670979][ T0] do_idle+0x190/0x320 [ 246.675037][ T0] cpu_startup_entry+0x15/0x20 [ 246.679769][ T0] start_secondary+0xe3/0x110 [ 246.684413][ T0] secondary_startup_64+0xa4/0xb0 [ 246.689401][ T0] [ 246.691697][ T0] Reported by Kernel Concurrency Sanitizer on: [ 246.697818][ T0] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.8.0-rc1-syzkaller #0 [ 246.705672][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.715697][ T0] ================================================================== [ 246.723741][ T0] Kernel panic - not syncing: panic_on_warn set ... [ 246.730306][ T0] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.8.0-rc1-syzkaller #0 [ 246.738159][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.748181][ T0] Call Trace: [ 246.751455][ T0] dump_stack+0x10f/0x19d [ 246.755757][ T0] panic+0x1f8/0x63a [ 246.759641][ T0] ? vprintk_emit+0x44a/0x4f0 [ 246.764287][ T0] kcsan_report+0x684/0x690 [ 246.768773][ T0] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 246.774297][ T0] ? tick_nohz_next_event+0x21d/0x310 [ 246.779640][ T0] ? tick_nohz_get_sleep_length+0xca/0x140 [ 246.785413][ T0] ? menu_select+0x328/0x1030 [ 246.790071][ T0] ? cpuidle_select+0x3d/0x50 [ 246.794723][ T0] ? do_idle+0x190/0x320 [ 246.798940][ T0] ? cpu_startup_entry+0x15/0x20 [ 246.803860][ T0] ? start_secondary+0xe3/0x110 [ 246.808677][ T0] ? secondary_startup_64+0xa4/0xb0 [ 246.813850][ T0] ? check_preemption_disabled+0x3f/0x1a0 [ 246.819548][ T0] ? debug_locks_off+0x90/0xc0 [ 246.824289][ T0] kcsan_setup_watchpoint+0x453/0x4d0 [ 246.829644][ T0] tick_nohz_next_event+0x21d/0x310 [ 246.834816][ T0] tick_nohz_get_sleep_length+0xca/0x140 [ 246.840417][ T0] menu_select+0x328/0x1030 [ 246.844901][ T0] ? check_preemption_disabled+0x3f/0x1a0 [ 246.850595][ T0] ? _raw_spin_unlock_irq+0x4b/0x70 [ 246.855767][ T0] cpuidle_select+0x3d/0x50 [ 246.860416][ T0] do_idle+0x190/0x320 [ 246.864713][ T0] cpu_startup_entry+0x15/0x20 [ 246.869444][ T0] start_secondary+0xe3/0x110 [ 246.874102][ T0] secondary_startup_64+0xa4/0xb0 [ 246.880494][ T0] Kernel Offset: disabled [ 246.884801][ T0] Rebooting in 86400 seconds..