[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2020/10/08 18:56:56 fuzzer started 2020/10/08 18:56:57 dialing manager at 10.128.0.26:38013 2020/10/08 18:56:57 syscalls: 3450 2020/10/08 18:56:57 code coverage: enabled 2020/10/08 18:56:57 comparison tracing: enabled 2020/10/08 18:56:57 extra coverage: enabled 2020/10/08 18:56:57 setuid sandbox: enabled 2020/10/08 18:56:57 namespace sandbox: enabled 2020/10/08 18:56:57 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/08 18:56:57 fault injection: enabled 2020/10/08 18:56:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/08 18:56:57 net packet injection: enabled 2020/10/08 18:56:57 net device setup: enabled 2020/10/08 18:56:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/08 18:56:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/08 18:56:57 USB emulation: enabled 2020/10/08 18:56:57 hci packet injection: enabled 2020/10/08 18:56:57 wifi device emulation: enabled 19:00:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:00:14 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) timerfd_create(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 19:00:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:00:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003f00)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, @TCA_RED_FLAGS={0xc}]}}]}, 0x154}}, 0x0) 19:00:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/4096) 19:00:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') syzkaller login: [ 262.379206][ T6866] IPVS: ftp: loaded support on port[0] = 21 [ 262.538414][ T6868] IPVS: ftp: loaded support on port[0] = 21 [ 262.711446][ T6866] chnl_net:caif_netlink_parms(): no params data found [ 262.787350][ T6870] IPVS: ftp: loaded support on port[0] = 21 [ 263.031462][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.038667][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.061624][ T6866] device bridge_slave_0 entered promiscuous mode [ 263.092341][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.095627][ T6872] IPVS: ftp: loaded support on port[0] = 21 [ 263.099434][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.119530][ T6866] device bridge_slave_1 entered promiscuous mode [ 263.147311][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 263.219225][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.309689][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.377421][ T6874] IPVS: ftp: loaded support on port[0] = 21 [ 263.417911][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 263.457445][ T6866] team0: Port device team_slave_0 added [ 263.508626][ T6866] team0: Port device team_slave_1 added [ 263.564687][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 263.609882][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.617625][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.650040][ T6868] device bridge_slave_0 entered promiscuous mode [ 263.666116][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.673340][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.683900][ T6868] device bridge_slave_1 entered promiscuous mode [ 263.700521][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.707543][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.734002][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.782437][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.798182][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.814013][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.821544][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.848817][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.947575][ T6868] team0: Port device team_slave_0 added [ 263.995525][ T6866] device hsr_slave_0 entered promiscuous mode [ 264.002663][ T6866] device hsr_slave_1 entered promiscuous mode [ 264.014438][ T6868] team0: Port device team_slave_1 added [ 264.036062][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.043871][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.053360][ T6870] device bridge_slave_0 entered promiscuous mode [ 264.064421][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.071680][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.079849][ T6870] device bridge_slave_1 entered promiscuous mode [ 264.272228][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.279208][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.305305][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.321305][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 264.322115][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.383788][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.391277][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.419068][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.433680][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.443418][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 264.560530][ T2477] Bluetooth: hci1: command 0x0409 tx timeout [ 264.570025][ T6870] team0: Port device team_slave_0 added [ 264.582191][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 264.625221][ T6870] team0: Port device team_slave_1 added [ 264.670630][ T6868] device hsr_slave_0 entered promiscuous mode [ 264.678062][ T6868] device hsr_slave_1 entered promiscuous mode [ 264.686119][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.694327][ T6868] Cannot create hsr debugfs directory [ 264.721672][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 264.755374][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.762520][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.789811][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.801836][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 264.851101][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.858087][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.886532][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.974016][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.993658][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.003042][ T6872] device bridge_slave_0 entered promiscuous mode [ 265.012769][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.019847][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.029202][ T6872] device bridge_slave_1 entered promiscuous mode [ 265.040689][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 265.062885][ T6870] device hsr_slave_0 entered promiscuous mode [ 265.069898][ T6870] device hsr_slave_1 entered promiscuous mode [ 265.078026][ T6870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.086155][ T6870] Cannot create hsr debugfs directory [ 265.121393][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.158725][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.211854][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.220290][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.230362][ T6874] device bridge_slave_0 entered promiscuous mode [ 265.278546][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.285855][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.294317][ T6874] device bridge_slave_1 entered promiscuous mode [ 265.311986][ T6872] team0: Port device team_slave_0 added [ 265.361533][ T6872] team0: Port device team_slave_1 added [ 265.379501][ T2666] Bluetooth: hci4: command 0x0409 tx timeout [ 265.395290][ T6866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.412764][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.419861][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.429811][ T6887] device bridge_slave_0 entered promiscuous mode [ 265.450066][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.465622][ T6866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.476298][ T6866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.496173][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.503740][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.511999][ T6887] device bridge_slave_1 entered promiscuous mode [ 265.530716][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 265.541714][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.560829][ T6866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.587218][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.600342][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.628016][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.647629][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.654852][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.683172][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.719723][ T6874] team0: Port device team_slave_0 added [ 265.733142][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.772691][ T6874] team0: Port device team_slave_1 added [ 265.781174][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.862488][ T6872] device hsr_slave_0 entered promiscuous mode [ 265.870125][ T6872] device hsr_slave_1 entered promiscuous mode [ 265.877811][ T6872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.885681][ T6872] Cannot create hsr debugfs directory [ 265.922647][ T6887] team0: Port device team_slave_0 added [ 265.929537][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.938341][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.965419][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.994069][ T6887] team0: Port device team_slave_1 added [ 266.037811][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.046401][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.073769][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.104172][ T6868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.159937][ T6868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.178115][ T6868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.194923][ T6868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.219283][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.227366][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.255081][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.282871][ T6874] device hsr_slave_0 entered promiscuous mode [ 266.292638][ T6874] device hsr_slave_1 entered promiscuous mode [ 266.299405][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.308433][ T6874] Cannot create hsr debugfs directory [ 266.315790][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.324176][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.351429][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.366562][ T6870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.400650][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 266.430118][ T6870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.472669][ T6887] device hsr_slave_0 entered promiscuous mode [ 266.485534][ T6887] device hsr_slave_1 entered promiscuous mode [ 266.494018][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.502920][ T6887] Cannot create hsr debugfs directory [ 266.509172][ T6870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.570644][ T6870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.641014][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 266.666675][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.816439][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.835198][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.857387][ T6866] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.881202][ T2477] Bluetooth: hci2: command 0x041b tx timeout [ 266.958615][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.968684][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.978711][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.986088][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.994437][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.004026][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.012796][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.019862][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.028175][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.037953][ T6872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.056224][ T6872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.074232][ T6872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.096358][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.104884][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.120967][ T6872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.128282][ T7921] Bluetooth: hci3: command 0x041b tx timeout [ 267.187419][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.197048][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.207977][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.218011][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.231149][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.248370][ T6874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.294610][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.304141][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.314247][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.336449][ T6874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.355128][ T6874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.377514][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.386003][ T6866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.403976][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.414284][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.424334][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.436608][ T6874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.448328][ T2477] Bluetooth: hci4: command 0x041b tx timeout [ 267.489797][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.519643][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.535548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.544243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.553215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.562223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.570015][ T6887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.608187][ T2477] Bluetooth: hci5: command 0x041b tx timeout [ 267.629690][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.639862][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.649338][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.656525][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.664584][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.674379][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.684930][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.692106][ T8153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.699756][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.709401][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.718451][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.726438][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.734400][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.744556][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.753490][ T6887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.787965][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.799060][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.811652][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.819476][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.828945][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.838207][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.845418][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.853548][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.862678][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.871657][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.878765][ T8153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.887195][ T6887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.900171][ T6887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.934109][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.947967][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.959745][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.999201][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.008498][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.017944][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.026969][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.036331][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.083923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.093779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.105385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.115929][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.125291][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.138205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.175394][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.188758][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.198926][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.212383][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.224834][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.235095][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.245331][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.254574][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.287349][ T6866] device veth0_vlan entered promiscuous mode [ 268.301776][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.313275][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.351528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.360055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.386513][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.421515][ T6866] device veth1_vlan entered promiscuous mode [ 268.443660][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.458438][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.469380][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.477549][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.485729][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.494239][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.506219][ T7921] Bluetooth: hci0: command 0x040f tx timeout [ 268.517183][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.541440][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.549444][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.558796][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.575266][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.587273][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.609574][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.619590][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.629557][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.636842][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.673486][ T6866] device veth0_macvtap entered promiscuous mode [ 268.711868][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.720563][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.739363][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 268.752295][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.761022][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.768117][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.777214][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.787363][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.796399][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.807753][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.832812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.840775][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.854564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.864579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.909866][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.923461][ T6866] device veth1_macvtap entered promiscuous mode [ 268.944687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.961740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.970327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.980511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.989898][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 269.020260][ T6870] device veth0_vlan entered promiscuous mode [ 269.064651][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.075002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.091589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.100087][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.107255][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.119700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.128922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.137671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.146320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.155486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.164904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.174343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.184062][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.194266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.203813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.212816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.221913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.230290][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.237461][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.245478][ T6868] device veth0_vlan entered promiscuous mode [ 269.255822][ T8173] Bluetooth: hci3: command 0x040f tx timeout [ 269.279859][ T6872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.293400][ T6872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.306304][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.315515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.323903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.331885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.339799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.347861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.356991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.365735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.375119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.383939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.396119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.405380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.426595][ T6870] device veth1_vlan entered promiscuous mode [ 269.447238][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.472248][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.480463][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.490490][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.500216][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.514879][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.525641][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.531776][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 269.548327][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.561016][ T6868] device veth1_vlan entered promiscuous mode [ 269.610550][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.619349][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.628513][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.638171][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.647293][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.656634][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.665508][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.673486][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.691112][ T8173] Bluetooth: hci5: command 0x040f tx timeout [ 269.692474][ T6866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.710094][ T6866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.724080][ T6866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.733493][ T6866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.751712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.759976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.776203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.787742][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.823044][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.832647][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.840933][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.851540][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.862554][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.871453][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.885692][ T6874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.896113][ T6868] device veth0_macvtap entered promiscuous mode [ 269.912797][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.945089][ T6870] device veth0_macvtap entered promiscuous mode [ 269.965893][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.979000][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.988753][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.999337][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.009496][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.016672][ T8173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.026513][ T6868] device veth1_macvtap entered promiscuous mode [ 270.044933][ T6870] device veth1_macvtap entered promiscuous mode [ 270.062168][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.097761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.113271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.127601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.134761][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.146991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.154635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.237087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.250660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.262140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.282118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.310521][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.340118][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.363344][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.371300][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.391982][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.413696][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.430641][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.443019][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.485324][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.503071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.513115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.524962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.533629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.543927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.553498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.563332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.574932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.585025][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.597423][ T6870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.609176][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 270.610078][ T6870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.627740][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.642363][ T6870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.651721][ T6870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.660440][ T6870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.670071][ T6870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.696248][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.706831][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.718864][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.734027][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.745560][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.754289][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.770732][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.781524][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.782238][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.802165][ T8173] Bluetooth: hci1: command 0x0419 tx timeout [ 270.806922][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.818773][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.827503][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.836438][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.846622][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.855697][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.878508][ T6887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.892774][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.903240][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.912487][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.923954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.943730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.961838][ T6872] device veth0_vlan entered promiscuous mode [ 270.969808][ T6868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.990602][ T6868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.001741][ T6868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.010553][ T6868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.051102][ T12] Bluetooth: hci2: command 0x0419 tx timeout [ 271.086517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.151834][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.159312][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.179314][ T6872] device veth1_vlan entered promiscuous mode [ 271.214578][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.274054][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.293406][ T8173] Bluetooth: hci3: command 0x0419 tx timeout [ 271.296509][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.325531][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.355748][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.445231][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.472481][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.481094][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.519936][ T6872] device veth0_macvtap entered promiscuous mode [ 271.560357][ T6874] device veth0_vlan entered promiscuous mode [ 271.576590][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.585779][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.587392][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.607556][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.612584][ T12] Bluetooth: hci4: command 0x0419 tx timeout [ 271.640356][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.656956][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.667298][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.678417][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.696414][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.717799][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.762436][ T12] Bluetooth: hci5: command 0x0419 tx timeout [ 271.762711][ T6872] device veth1_macvtap entered promiscuous mode [ 271.838971][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.854908][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.873704][ T6874] device veth1_vlan entered promiscuous mode 19:00:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0xffffffff}}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 271.943479][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.975671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.976596][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.986974][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.023567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.054196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.064442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.090474][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.158710][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.184571][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.205306][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.217813][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.229144][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.245789][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.274188][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.283862][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.288054][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.312704][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.322174][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.368619][ T6887] device veth0_vlan entered promiscuous mode [ 272.382937][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.394493][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.414403][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.425045][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.435047][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.447090][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.458547][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.479321][ T6874] device veth0_macvtap entered promiscuous mode [ 272.490077][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.527705][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.557253][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.579994][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.610266][ C0] hrtimer: interrupt took 41603 ns [ 272.617250][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.626403][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.650161][ T6872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.669513][ T6872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.684581][ T6872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.693778][ T6872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.710150][ T6874] device veth1_macvtap entered promiscuous mode [ 272.720375][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.730449][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.739155][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.749556][ T8173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.759697][ T6887] device veth1_vlan entered promiscuous mode [ 272.847681][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.860085][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.871241][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.882511][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.893567][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.905920][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.916395][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.928063][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.940076][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.961868][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.970285][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.980432][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.990935][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.000827][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.010484][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.030294][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.072122][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.098407][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.109822][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.124764][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.136952][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.147422][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.159154][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.172570][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.201379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.210914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:00:26 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) timerfd_create(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 273.244366][ T6887] device veth0_macvtap entered promiscuous mode [ 273.268570][ T6874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.290661][ T6874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.309171][ T6874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.329482][ T6874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.390308][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.410155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.419107][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.456425][ T6887] device veth1_macvtap entered promiscuous mode [ 273.515870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.563489][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.591987][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.608972][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.615507][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.628960][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.639886][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.652461][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.663128][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.673902][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.685657][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.695568][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.707551][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.720433][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.749778][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:00:26 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) timerfd_create(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 273.778069][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.798904][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.824233][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.870478][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.892436][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.911841][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.935658][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.955582][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.992361][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.017802][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.046039][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.066876][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.088193][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.115907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.129273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.154074][ T6887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.167815][ T6887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.187269][ T6887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.199721][ T6887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.223837][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 19:00:27 executing program 3: unshare(0x2a000400) syz_mount_image$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}], 0x1) [ 274.280529][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.335054][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.345402][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.349046][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.372606][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.522471][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.530469][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.555550][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 19:00:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x24200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x0, 0x0, 0x0, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'ip6gre0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x640}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vlan0\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'\x00S'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 19:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 19:00:27 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) timerfd_create(0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 19:00:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x24200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x0, 0x0, 0x0, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'ip6gre0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x640}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vlan0\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'\x00S'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 274.694930][ T8347] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 274.701867][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.701910][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.722250][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.855222][ T8357] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 275.119301][ T8366] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 3, id = 0 19:00:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:00:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x24200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x0, 0x0, 0x0, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'ip6gre0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x640}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vlan0\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'\x00S'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 19:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) [ 275.259584][ T8371] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 275.467031][ T8361] IPVS: ftp: loaded support on port[0] = 21 [ 275.945807][ T8384] IPVS: ftp: loaded support on port[0] = 21 19:00:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x24200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x0, 0x0, 0x0, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'ip6gre0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x640}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'vlan0\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {'\x00S'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 19:00:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0xffffffff}}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) 19:00:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000004000400140006"], 0x30}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:00:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') [ 276.257180][ T8437] xt_addrtype: ipv6 BLACKHOLE matching not supported 19:00:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 19:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) [ 276.811362][ T8443] IPVS: ftp: loaded support on port[0] = 21 [ 276.819637][ T8451] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 3, id = 0 19:00:30 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000780)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf9b0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 19:00:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 278.133951][ T8445] IPVS: ftp: loaded support on port[0] = 21 19:00:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:00:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"18ea3864557578335cda91525290bd1e"}}, @ib={0x1b, 0x0, 0x0, {"ae9ad3314d1163c9f539ac91f967c560"}}}}, 0x118) 19:00:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000002940)="0700ffff0000", 0x6}]) 19:00:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 19:00:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0xffffffff}}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:00:32 executing program 4: modify_ldt$write(0x1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x74000000, 0x0) 19:00:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) dup2(r0, r2) [ 279.578492][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 19:00:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 19:00:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 19:00:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 19:00:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0xffffffff}}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:00:32 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) [ 280.244530][ T8546] IPVS: ftp: loaded support on port[0] = 21 [ 280.356439][ T8547] IPVS: ftp: loaded support on port[0] = 21 19:00:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:00:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 19:00:34 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) 19:00:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 19:00:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) 19:00:34 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) 19:00:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 282.138488][ T8606] IPVS: ftp: loaded support on port[0] = 21 19:00:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x4, 0x1d84}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'gre0\x00', 0x3}, 0x18) r2 = dup(0xffffffffffffffff) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) waitid(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xd2a, 0x0, 0x10001}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') 19:00:37 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x201, 0x0, 0x0) 19:00:37 executing program 1: syz_mount_image$hfsplus(&(0x7f0000001400)='hfsplus\x00', &(0x7f0000001440)='./file0\x00', 0x0, 0x1, &(0x7f0000001740)=[{0x0, 0x0, 0x300000000}], 0x0, &(0x7f00000017c0)) 19:00:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 19:00:37 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) syz_open_procfs(0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2905}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000001c0)=ANY=[], 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) [ 284.359507][ T8658] hfsplus: unable to find HFS+ superblock 19:00:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 19:00:37 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) 19:00:37 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2209895f348f8dc6716e08d1364ad5526c6e898cbb69942f464de7188b00"}, 0x60) getsockname$netlink(r0, 0x0, &(0x7f0000000100)) [ 284.530139][ T8658] hfsplus: unable to find HFS+ superblock 19:00:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind(0xffffffffffffffff, 0x0, 0x0) [ 284.626763][ T8661] IPVS: ftp: loaded support on port[0] = 21 19:00:37 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) [ 284.944993][ T8677] IPVS: ftp: loaded support on port[0] = 21 19:00:37 executing program 4: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) [ 285.251010][ T8659] syz-executor.3 (8659) used greatest stack depth: 23392 bytes left 19:00:38 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) 19:00:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x164, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x3d) 19:00:39 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) syz_open_procfs(0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2905}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000001c0)=ANY=[], 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:00:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 19:00:39 executing program 2: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) 19:00:39 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac141436"], 0x20}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 19:00:39 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') 19:00:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xaea2, 0x0) 19:00:39 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000240)) 19:00:39 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x400000006, 0x1, 0x400000000000000]}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x4a212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x0, 0x80000003}, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.511725][ T8764] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:00:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x30}}, 0x0) 19:00:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 19:00:39 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r1, 0x0) 19:00:39 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000240)) 19:00:40 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) syz_open_procfs(0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2905}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000001c0)=ANY=[], 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:00:40 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x7ff, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)="0c268a927f1f9d3177655992aedd7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67a060000000000000025a3a07e758044ab4ea6f7ae55d88fecf900"/77, 0xffffffd1, 0x44870, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fff4fec, 0x0) 19:00:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4088, 0xff8}], 0x1, 0x0, 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 19:00:40 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000240)) 19:00:40 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 19:00:40 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000240)) 19:00:40 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 19:00:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)=ANY=[], 0xfffffffffffffffe) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 19:00:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 19:00:41 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611180000000000046000000000000009500000000000000abbb1937ea5badc10959c63aa9ed60b6b8251b729d213d0654a8667a3fd06f01c655b3a30bc5151f2278862cfa841190646a468d0a78edd8c05823b5d764071724f20a8ad2da17ddc05f1e89011432bf2449bbedccbcdb7f42719e7cd523c5e543cd2ed361dbd7df872ce02834763adefacb547e159ea1c1663725bf1488bb463602b3cbf682fe003597172830898c542c24d02ae1feb254d2c7dde9024ad222eb23b6e29e57b8fb42d8d4e11df61d0644704ed8855a8182a94391802a4d24b91b3917a686950a43a417591939d409eab9cb8b3005aa9fe1ebe317426816f3d9f9e5b0523fff2292797b6d787b03a5f52fd26ed99dae8777aa47a9e6ae432818bfd955f6c0e1a5d78195ee90803255cf722075ecdf73"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 19:00:41 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='whint_mode=o']) 19:00:41 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) syz_open_procfs(0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2905}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000001c0)=ANY=[], 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) 19:00:41 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611180000000000046000000000000009500000000000000abbb1937ea5badc10959c63aa9ed60b6b8251b729d213d0654a8667a3fd06f01c655b3a30bc5151f2278862cfa841190646a468d0a78edd8c05823b5d764071724f20a8ad2da17ddc05f1e89011432bf2449bbedccbcdb7f42719e7cd523c5e543cd2ed361dbd7df872ce02834763adefacb547e159ea1c1663725bf1488bb463602b3cbf682fe003597172830898c542c24d02ae1feb254d2c7dde9024ad222eb23b6e29e57b8fb42d8d4e11df61d0644704ed8855a8182a94391802a4d24b91b3917a686950a43a417591939d409eab9cb8b3005aa9fe1ebe317426816f3d9f9e5b0523fff2292797b6d787b03a5f52fd26ed99dae8777aa47a9e6ae432818bfd955f6c0e1a5d78195ee90803255cf722075ecdf73"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 288.445134][ T8799] syz-executor.3 (8799) used greatest stack depth: 23120 bytes left [ 288.466627][ T8826] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.504334][ T8826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 288.569090][ T8826] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.578469][ T8826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:00:41 executing program 1: memfd_create(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 19:00:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="24b64000f9ceef1b5d50"], 0x1a) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) 19:00:41 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='whint_mode=o']) 19:00:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca5e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba73ac381dd4dea5dac2707112e51a13a19863b5e2e3300bbd04055fff98a5c", 0xa3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 19:00:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) [ 289.123169][ T8846] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 289.125285][ T8846] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:00:42 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='whint_mode=o']) 19:00:42 executing program 1: memfd_create(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 289.557748][ T8864] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 289.557765][ T8864] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:00:42 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='whint_mode=o']) 19:00:42 executing program 3: io_setup(0xbd0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 289.990831][ T8878] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:00:43 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0xa, &(0x7f0000000080), 0x4) 19:00:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) [ 290.044292][ T8878] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:00:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) 19:00:43 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0xa, &(0x7f0000000080), 0x4) 19:00:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgroups(0x0, 0x0) 19:00:43 executing program 1: memfd_create(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 19:00:45 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x437) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) 19:00:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgroups(0x0, 0x0) 19:00:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0xa, &(0x7f0000000080), 0x4) 19:00:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) 19:00:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) 19:00:45 executing program 1: memfd_create(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$pptp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 19:00:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0xa, &(0x7f0000000080), 0x4) 19:00:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgroups(0x0, 0x0) [ 292.485855][ T6879] block nbd0: Receive control failed (result -107) [ 292.505413][ T2877] block nbd0: Dead connection, failed to find a fallback [ 292.512816][ T2877] block nbd0: shutting down sockets [ 292.520000][ T2877] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 19:00:45 executing program 2: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='a', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='a', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='a', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, 0x0) 19:00:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getown(0xffffffffffffffff, 0x9) 19:00:45 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:00:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 19:00:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getgroups(0x0, 0x0) 19:00:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) 19:00:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) 19:00:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) 19:00:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6}, {0x10000008}, {}]}]}}, &(0x7f0000000500)=""/222, 0x3e, 0xde, 0x8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) wait4(0x0, 0x0, 0x0, 0x0) 19:00:46 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 293.660154][ T8981] BPF:[1] FUNC_PROTO (anon) [ 293.700466][ T8981] BPF:return=0 args=( [ 293.729456][ T8981] BPF:0 (invalid-name-offset) [ 293.772152][ T8981] BPF:, 0 (invalid-name-offset) [ 293.818591][ T8981] BPF:, vararg [ 293.841252][ T8981] BPF:) [ 293.863478][ T8981] BPF: [ 293.920243][ T8981] BPF:Invalid arg#1 19:00:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) [ 293.976858][ T8981] BPF: [ 293.976858][ T8981] [ 294.044857][ T8984] BPF:[1] FUNC_PROTO (anon) [ 294.051688][ T8984] BPF:return=0 args=( [ 294.095422][ T8984] BPF:0 (invalid-name-offset) 19:00:47 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 294.135639][ T8984] BPF:, 0 (invalid-name-offset) [ 294.161206][ T8984] BPF:, vararg [ 294.189161][ T8984] BPF:) [ 294.208539][ T8984] BPF: [ 294.235917][ T8984] BPF:Invalid arg#1 [ 294.250439][ T8984] BPF: [ 294.250439][ T8984] 19:00:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="1f5583624999c4665398664c3fd64362f39caf17ee2c5c2fd6d42bce84c2e238b5eae71f", 0x24}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 19:00:47 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004300)="17145c1b3a9d7f231941320761fb9720b86afc54c64170a53308889854fc2eab092adc285c13de22db75962fc5a2c0cd2470e441abc01f14d1e144aeba446bc3eb6148fabaced19ea234922810598bfda11a20594e8118f4ff986856fbaec863841c6cff35046f5c62713d70f743804175b72324faa1182df26f58ce9b34035ac9e42331d54f8d363da581c70a36f2a631936ac10b220b9814f68a48bd507f9284728e0305063a04f3758e513bca3dde0c8cee98f09a2062b9d4084b334f849ffdf748389209be3bc02552b619ecfa5eacddc390dab2c590683801f197d89e73e8db628f71920db77dcdc9e4be5be77706eb019b9892678d226bf7435a57bf71c5e1f72d7d488581780f1c746e8809fdb47e0b381e7c6d9b902dd30291437bef7581e76ebe5e34e5f4f21a09ab188307d0dbf3b667900c4e04c7a5a0ab6c45a44324b7c0bfa4a009c9c619abcb51b101934731d0f1dac1ca2075bd90459efd85762b506ade1c471a28e800af36d14757f44b47ad72922791b4b34e0cd3c3e5654b2285562c1c40ea23940022c82dd4f4e1cc38af50ca576344dcf681dff783473112af5b136d204014b1deab649fe728db0fbda697d1ed5766d66c5e37c61d6022220e3b92a5206387563376ddd5db1e414b95698542d9224cede82164d47fc21537c6e73dc0255506013d0ad766eeb9f9506f28dcc033f1ee451b0b4dd4a15d3a3e9da12dc4cd6a476f772c5b35169cf4488b3a64f6aba72903ad7b1eb7f3036384a97bc770b31150b5a3efecd94f5d8d060ee330b22eb7886625d2cecbdf182345830e003d3a4271ad2976db5bc02b1155be690673c57bfe6b7893272030c815f0636b6d71fedb0c537c1e8cddbfb6f0738017ac4ec27a22b08055ab657d5081d173a4c150b402064ae214ae94900ad52f6331164b3012cc6742ba6734f0bf562ac7f37d2168fa97d60506db6bf42561526cfddc2b621fd97c08d9592d036b44470ff3aa062d50c8a34663a2b7079317464709ddabd312d3df24cfabe02fa403647d6ab9137917c8ceb5f257577ab1567ff9d1094959394c904afb5b56f9732c8854742f16c427667d9657d58ab3aeea28d68d3b4e26873e50bbab7ce0d414933d801e4422326bcc7cbac66818159fe02715832e8c011b4952a73ac78a4d3838f09680763e6aab85514be32db643e60325e11ba167ca5dad69f183ce9bcc850c09823bb28bf43e8b1ae0e61c301ee447212881e8da0c8f09df550d6107cc3537d7e13e75e133b66c3dba2b6e2e6d4d2b7488da35cd9fb9caabeb8e80f439d32e8cef22d5b755fad8e5130e0b1835830787fab9cd3fec896f54674aa5d9f06b50b2bd4a1a24468a07d92b3eaba084f7b68cf58185d198e10417b01a26881d52b59d9d73251d95f7a6d302ecfd7fd511713b13cd351076bdf4be4f94eadb9eacc406da0c3f29896deb2b3caf9b427ed482ea2eec451d6e2afdd3dccd1df2ebd5d0f86469335cb2addd72c6998158ff155f28a606611e457e59b49e1e9ae8db2bd7a60e524453e2071d875c7ea1b6444689a8197240aa3058f0a05d99b8cf147d24a1c70edf6fd212cd25954db8e438c1cd9843e6325e331e413996fe9d0f348269f09ceff29bec5d44accf42e7b164593c46bb12f0a398bb1d910f88f74e469192af83881770101067f322c7ea411f4a29ecf6f6969b32546550793a2f3be04b746af3682acc1bf9ddec73f427648fe1dfd1c96998dc9f683b872fd6a428f106c92a30b6d239d49e2ce62c5eafb792f28218cfb4bf5630615ee98d6921ed3f2b3c382e91ef9d0b0e94f9c52bffde0000fe3003b738a24963e9f30595dc9eaec21c92ddd9f3736d36ce44367e852586031c18024114066f858d0241717ab0fd027adc935f1ada350d4c0fa7f676159a32aad078189b9d8c2e986783b8d49a2a70cfde1c488904d196d587f832246c7dfea6fa2e035d06f6106289d0122d8cf9cbfe4eb6880965caff9bfc00ff16b3af14a97e74ca7cf4b736afebe797cd34ea9d49d2c631505b4f1d0d69753d3f3a344ab673ca24f0e2cdbe795877f162b7c62c53ab28a9828ad9be6e4537956b4d20276c9cecdb42375b24d932fad4fcf399c6b8c00f3e4bcc930ca6f5b39d0512761d7a5105668471f39e4a1775ad53e88bc07e723aa46b1451084671f89881567146b337f2fcd1dc277a63fc436a04f04a51b2bb7a1ddc7e2c503d1532b0366196654f111362aa8b55714e7e5f5d07a2783ba0b98b285faafd16598fef3ef14fc26e3d8eaac87090982acc9ca391d115c15e3885ddb842250a7859d5161efb536fac5afeca6165f72fcf6ab15516250f424ef70a64625f10b3d4832922526a2ca258f4a55517a64fe323b4391a9be8f2de86bbb8d1b81e5efcd4bd0c6a894e117b7345624506dc80b340be6b032e0d53b758eb7e82aa93c2f59ae30fa530d69a7894c497925a07b5a91bf70543d4a59fd08918088bdf762f949fd1a875e285614cd50d73d300e2e388b19eb57eaaeb4ba308ccfdd91dd695825a926cde5fee7333b4ac7568d0409d68b659c0ac27d462a1e6b0a69f1cc8ecd50467d6f06acf93d129227b2513fa7be667d86cecd7d928685f8f80c8e69c7f2981587bdd0e159995fa53706d4a7e8f0c5c00e6f8102c307bfea76c1f9a667b9e2c2392c8a370d215c08e3b3d155a8b88f46b5e6af3bda9168b3e38d7bdd4d22efd13a130db3bab125e66f94c7968ce9641d6c49a9c02682e1c3588056ff1dc5d30335c3091b08224895733d06d55ab8d953c41c43e2378824b5162abcf0bae1789c8b69d289b8a515d531a81e0b089d35723b422d2bdcf6677e37a1f9cc0d1b44417f7045a8854b37a088cd308d32e65448bb940421770ff96a8d3a5245b3201961a13f3bde41f965a7c9721ca00a353fcb2095d4116b49f865fd51eea5b1a5cd7fc90551775f48a0d829d81e2542310af3762aaec5e695a8aea32ba70e08d878c5d8b09f1e94f45e2b095e64c57901e7499cd2831f7a05a136c8e14d85fcf9853cef87f7a669e772e369968f1778df6022967fccc94ba24c87b0959199387dbc50a9e0fa155530e659d529a824929447d7c73ff387db3e7b317f121ab2366e5efd0c5038bebc5d66cabdf5175008a062acdd7ee02a672e05c0f34eb13936023e76a535fbf929325dd491cc310c63a7d813b1dcdc338ddd84868b87ce1f0645e568045068dff5f285b1c3892c6eba3f5697e3293ec4d67db6f32da45f267d0032350f5428e5493e345f9eeda82a50f72c0011e4200109c7882d8ff42b58cf53d370c583933dc8f49631ef22f269f043653dc4065fab6457ea2160e7cf811e8c3e257ac44304daa3e67febd329d54683e2542db36f43d8d5812e08ab2bce1daeab0e1782d16a42a540689d45f5576c886f1137a1f53dc088427d5d5b631dd4d915ed81ad2cc6066e44744a01c549479eeb332f675e8cabdb29ee56538370173ab9cf8598114d112ae3a23843ca03b2fc3e5d5c9d62fbc67c47ed8cb7ab7f19fb72abc957a5ed4bc336e984c49469f1c558f46d5471c68a81f641521da98e3f53891236cf8086f4a3b3f42b531e5af86a5341b1be209f52e7c5de322a883a249d428c5aec4436f71f133a203479b9df4653f6414346506d7de35a7a4bde530bd983a779f46dd8a61facc9c59dff23f604d61ec2e2bf60342062cde3e8eeff754494e4be19bed4f6abf872fea164f26762c4f9b98ef5ba04c41e73ba4e28dcf55ff593935981a14d3e7d4a90154b26035d79db93eba44cb43b1b4dca7bfba6fd29f838168929548671506c457b80a54eefcc8c083063035baf1ce79fe11fce11b064c3f3be75e380f9f6333ccb290c720e7456a208b79b42b261ac9385c9b70d38291dd55433cce3395fa1741bcf144e7a1e091b8610f19f984ae77f266dccd7be15f2d55779c70770ebcb6b0a423c22772b40422a476bc56fe52316461544c957576fa1ea7cdcfcc9b273d3497a90ea873a1ffb3b06ab64fce00678e17dbfcc1dcd093c4d3c6f92bb428516bb58420ad3fd35844637eba63aa6284193ad0579db6cea7f3bc2a562b9e236570047a93edbdc781decee8552bd9f26274dc7e2029997d44dd2643ee84913ad51526879c421601777b36a8b78c55bfd3ebb7e1a79e6ce3f5f37296d314a7cfa60ccd5ebfa5267cc3e66348dac7092c15404fc9f318d0537504b454db7422ef8cac9c65651f414927753025ec902280ede688946ab2d0c8bd98372fa30932afef288dd264f7c4960cfda92045525b6bd0ce72993ed64579fa6385c275fe40c84f9446fa56bb2f1356a23e415a2216f422efe7a6966ec46b0e863676896b9122d76d049c840f7a4b3fd04d6335944a74f2b7ec8948c5d22f367a128526e9be674db1d4b6f7515022a6dae03c6f198fc94a2b039879583f6240504dd3c9f6a3ec17b5feea56fdd2d1e989fdb159d28881460df4a6c36816827645223d5a465e7cf5a91079738669fe9179432d1bcdb939df92fa5644357d8da1be59c10ab159f219b3def641f5ff581221e976d9da40860e34fcc5b208f3725e5fd4b3b39a4f39162c90763f20676bec646055a11c5b5d946e396bbb65797a7fc09044f8d364cb814198e8c9414f8a0777dc027355bd0e57aee3fda4047a46fe9e92f1875b5920c288d8c7873a9e06fd0193ba7c67ccbac7619128165d076e4f3d017651fa8549c0d47fafc67eb32e8b99ffeba1af855a5a3309757007a157a1830d1b96cb8e62b5aea83070e9a563e8988a2c7eab98355ab38da131d8b17e771d7651b47dd54679ee4fc6c0ec0d4384e4c70929c848d451790a4b7fcc73cdf09157cc7ef4fac5b6ddb7024e3709163626b0d98d2947c50a0d840c3b4f56fcc265403c58cff50ba494171a048409d5d1043d1425b513dd0c54833693f8c3a64cce4b3fa177fea5f712ae8fb26fd074502d4729de8c8db1aef2aab1a0d99dac4812a84ed933573173baf6d6aed166f0f6b56847d14e9338b7382340873625457d7a0eb0171b25631a250ca2a3cb803e2d62e76db991876e611251ccdf588e140ab1566e2e9f56596663c6f74857a62fe47f62ed06737a732f4968ea61964671c7c3c9a3f4d45f7582e8066d6c359dae544aa4526ef2365f302848e607b663a0c76d5a002abf73e8caa1aee45d60ec0721b55ed073ca71f8356194e63584571cc9ba5a5074baea1f4255158f5bfa18b39d3df48c60c868ec7da267ffc82166409049acd6c24b909476dec37b5e8c71fcd6a3a2af55e8993f37a82d907343e649261fd7060bc8a22b930a3fda3365caad2f4980a5122af944b3ecb872f8c8f246ba736ba26f3c08835bbe6c1d370ad72f258b3fc31c936c37c46d113b0c2b5e07af507773f82a41adeb962f6435868f376666f0e78b57a1339817eabfab973ddf9d01159a0708cb9d9bf18891ec47c37a786b06f78b8afdeac8a0ce825cc1d226ef74c35bc16b3efbb5c832322cb1214ee9a3c53cf8b1e3b72365e6ab71e77b9c4de63c2caec812f8e809efd021a6bc61a15a28d767f7793a495bc9c44165cf3c45232cafcaf91432cdb5105a64e8b3e3b5c9a5fc00fa1545534bcb8596fd51b937ab598b57ef2b1d9b25d3d8e96e854ed91b752b825b81eb480480f4540f0ae91a4df4562d2b2e132e866eed7c80876a2eed2801cf539df3a49e56bfa6a733ba3e8715fe990cefb0226aee07a902df296d6a4cf8cbb6011290e0caa76c8e06999465c89893119e11cbdb8815bf1501300cec659c280c084d016ecdc25df92cdb06b2a6925e8afd994547a69d2e7c0c8e0de52af32694b9799045a2296b8af40c8c21b9e02be2bc70a5be777d53c3b2c9dc58bc95aa55a3f634d809b96852f69ec8f754dc571e14fedc30088976f225a8ff3453f5be3537730a3ad6cf28afbac712f7c95677bd50df9d1052111ce894b3bba8113322446c437b369f72f1ab5a7aa67f6c99d15f6f972e5ab937bb34aba603dcfec87d8d4f5b46e40cda8e4d0e4cbc331ba0eaf5434b8cf6e8dd5541172c9f791e68219f246474c26ca371d49c5125893d9dbcb973df49ba2eb1b9bf5bd0f8331376c701f86d52896ab7281042707219410f435c4b78f1535c2834de8add3c36151e812c51d5b9f96cfc59a55f274fe4f37065ca389b584048012827a65c248757b8bc58cfb185fdb99f6621c2c60178879a2f2f181538fc62da3342b91a98cce4d673981980deb6fa83a8b2cb611953cbb4bfec028e8d643d3f3ff7895d05b9dee034f951ad15c7efb420b3d2c3aa14ce5bfe8ad3d26493cbc217ec29323219ef54e174a819806c92afd2ef0f83277f04d29e6140220cad68cc2312fa431d6bbb654bb41693fd14052b1f36d1f88d4009ac908f85376535b42d804baeb0a7e40b829764308ca655bb2a42247e5c4fcb29e96135d1f119851cd18c24b7521aca863e98d1ffc72b1440c5ae0a78937c52be6a66f21f949226615425ad5e1b8be844c36ac447937c7148b0383ec7a52b318d424aaf3f805c28e6e87de0108e1578e5c3c402bddd3aaeffefa85be2e5e33a86f0c5ac08f11c740563a1454a2f304e7052513142a8f503a4cf683adc4d80606477e812a9e55b67ccba99a9e3d74e7ef0f4c1c73903fd5a269a386cd2900fab4b3d6a319297f4bc641e302c41dfa9d408f5f0b803631707bc364d0bf9b653ecf91a379de54dd7f7e9e67285b8ebdbe315ae28415875fa1566d11e19b0c23a7248138360b3f3c4069e7c1d45dfd02de135c8e1c70290713b05dddc3a13c1a7703b8240e844cd9cf967d712d6d73a0560fe4b2ece784c27b9f80d7de69e5dd18764579d08682d22e44bfbf95ab17c707b1a3cf8b54e65789f00f0a133fa1b4fa6882fb9ae0fd38a654f9df2506a661e4999aee26e14b442c9cc58bd193135175316a17c38e106986860b8ae042cda18f7b04ef2bd195b7b872b2d73e4b5bd48725eb4af9ca933fb512cd8aef3171984957fe5a43ae862dec863255ff9d132bc42ee55befa639244455b4fc2dfc9f7186764079539e31894ad5bcb40f3f24357306f382408cd3b607ae2ef790625918238c26db2511dc304d27a92983ee6d13fa798d49b2ad0e6d93854a5c8a877b57b18527c0cd50dc8bab3bbbe30f00889e5fb3c3452b49967233dfe1cca066d45da97c51cf7e901c43a2fa93ac6225affba09339cad6ff085fa90861b207729bcc98decb00cb49c664227106b32cb533ebc7927abcb7eecb49b2dcc813c50e3a2005b292093e93ab629458f91c170acba324733fae3b45f2e3a5e9a597d746c4c009e91af727cff0c1bd82d0fc32798a92dd66116411152ab81dddb50dbd20040a58d35c979f63026a5430264177598434a11d8c995e4ba448bc5b1e0057087e6aba105b2577cd89e41443404aba4c4ad319e5829b39e2bff8c9910fc108a222392c883c06966b1c23f054a4a2a5554a5f2e7b0aa805b36792ad08c143c7b1635502f9b5a9cd42ecd4000d28d129b398661c756bdae9f6c01841fd2ebeb72cfb15eeef12dec5518b16fe0744c28c3bcc132d4b1fcbadc36d9bb24151bbf7e0d36e2cfb85cde06e5eb9a6061a435d13a642f12a07010bfa8606de0a42eb0119c8020f2420972ce0e5ef0a00ba9bb4f118b133bdd6909d7b7d7b0901ca26898abb21b309361c95c0086e7326c183f1cd23ed365f52fb7dba921f167d4276a75a4082447135acc9077cb4a82ce7d84d6ed4fe72ebcee7789c9ba8bf4e1f4b482dcb68de3c0ba37aa98fc0d571d6efa37a59f39c14382eb39837006a1fde309d77fdca4e1ed4ae7ccfaa686b7c784e0c6476b95f07d325d139aac136bddf83d426fd83b71cd54e468be15418ef5ec0d0daed2773e845a54ff6773139c50956cdb9251eec6ceecf792b701afdfea12dfdeb526e2cd261536b991782b51d0ed524e553ff9f541644dd89f3bac36b6ae5aa6504cdd7ba35386afecbf23ef062a4dac87b67c828fad451d876214289fd41eb89b817c5d2794be0c36329befbdd5af2995ec22d858d4520b9cf10659cae3c4c29765bb4fcd41d0bae1fb166e4e8d8f69d99bccc01502e35442ec4902d206f2bdb361824bf3dfd8b84412f817030ace6878edaa104e4fd8b13ff2ff1b86a265613c0efec0dea36e96d8d35ba8b09ae36783a53dcb71b6feea469e4834b1c10ba180acb306f82e5c3a787b846208a356e006edf9cbb9f6298d3940f015cff56ed685b9ea133b63389ead49daf36ffb5c94f45a747df1dbd72c9da8b747a1fb393088c4f046ef828a2292439ac0dcfa9d010247ef668e907ce77cd17d759cfa43a6f44727a99fc2c08452ca0b384bf22a70dba07c79d63f28b47c2dbff67c18c68633e87dd33f3d4cb11e0c81e6148a46ed6af9706d8a13ead7bda5120f3be5996ceac8c0d4d512b189e457161c758a62d2f97a3474abac47b5a57b5b7813835ec9cd08ad6c3125c18bb4afccee3082188e3ed454c45566ade61735b203c0bf5adff38b29887a58278f89f0831cbdee3b1013583f9121a8006f1dc006c8c0f0b6b5a6570a33fa2991a70c38051d5b1b36afaaa4f4c660c5bed305c3fe52df8d794330ee1bb5b9307ff248c534d10a84774a8c129dabce720dd19bbba1f761693202332e1cb7ffdd155a9da449b52babd2b90d2ca6dd90d74e84c918fb6244bdc0e46d97386c99eba31694903c5b6ed93cb37f2fb9f5fd842b7f99945901255800d84353df00d32b3f8f2790ca0f8be8f459d821af4cbf36d004b2ceec6bf8f369fc144dc79682c1cd7c4fe9f7e3fd8d34eeabe4bd013923eb50c5918ecccacf30b31fd6f6d7c7315b3474c96b62a2602fe5804a8a3d1a764349eec8d76bc24e3bb310ba317b581472e419b22470d96fe8f0cb1664825dcd63c38190494e0082b1d275cfa70cd2f262e16b342e5455505a8f5172181f35de7dd493563ad7234ed8ea112cf0e7a5387d03e5feda015cadf5f231dbff6a0592e2bfe548e0ba7470e6b4598ad27c4e3d09e6a4f663529144d1b6a870f98d6dfdc75bf9e6d8fb76364d5365c0329e0ced11c7004d7b04059a9ec7d26662f162c279dd5685a60c51ddafc26c6a43f5583623d8c97387c8fc82ecf532b7d0d1dcaa57dd37dfd76b0ac5187c1dc9689fce4a5862484d8ec96696f56b4403b35526ffa8494dcd5f93dd41342836d38d5dc4faa73d1bd0c9d9bff43f0b549b50cc17f0e6d86134bfe77a68e763cefd1dc97b6628615570afecf6093ba5ad8027bb8f43eb308a2cc25f5672dbd3b88beb39940e57481b97acbfd86355aa4da94353b81aa8085dc6ac41d7b31a2898ffdf4945f66a318360446a5a3cdd16be65f1454d531f953998029ac1b68de97d5b6479c22c226caf69659ea9af81fa0d981cf4244fad27a6abbe244248f9770db2a3f3b6ffa5d493ff033416ade6f7f85a879363cbc0168afe9f5b917fdeceb6ed1c1c22e2b5c2a38b56b090c9273cd40a1511686607be936a6be8312f8420234f6fd0aef105f58181940316dd7e25a9c3a7f9761dce227b44b0d286277b63037c704c41ca153dd98929cd6d1af4b357f0c88be2ef7941d174d2ef32bfcd825f339b23f7567f0e682b444bcf6fc1c0847d49dd004b6bdb3042dba8df600650f27417aa7c5cbf3a19820fbfed8a6187b7758d255c805f1cd9aa64778e0916748043810b85144e1cd1c8294ea207999a72223cf9c0884058fa5bcc07b895efeed1efe04959c03838475d09db0aa9a659ffe1ddc14725f0a3fcf9b765215a82f7c9b5a4efe68630185bd4ff14749dd84ae925d2d9d133d3392bcdd72782ef97f724e8412ccbe1cfa6156400fc09877110aab55721af04a19a0a8446ca21767e81c7a786644f714cacb5f7bdfd2c02e62c911ddcdccd764cffdb5a7c0b3a6430e4e6dc62b3e687e4cf6ff649b66c24ef4dc9666ed30ebaa86cc27f957aaa1ddc611e9be520c205c742b4583cce711fb4003a2f0578ce4f33b6ee40974f11e8ecde89ec1c182759adb329be0b423ed5cb4a53a6ca3ea925a60c087816ed0022b2975a45d3511f04bd7beda383236bce146a0fd01098fb6cedaf5191afa4b68a6a679790ecb760e9ea95c8a947c310f43b9d6ff9ab708c45f0c26509bd5f4ee67d5fe5eb1a72d09f6e0b3ba9b890c87604cfa10d085d098e8f8edf0716d7c88ec5704ac96f18cf3b65579a6f3731636005555d152e8f80eb77083f17ffc1b29670ef6b0e2f194ed17051046f22ef7aa3708b19e39babb3fc98f257731b0045267af3df351192dc734be0fede8f92b8205b293f6d70c67ea79e6ecd0e52da364bf3a53ae68390b5c37d4bf819302543d25ab06b33ac4d86c9c45bad1f406efef53fd84fa9ffb469d444b5388344ae2c8f0e96a230e69235f67b29f7da90916ab938cfc7c4f30b09bf62809531468307f4d50a8722d1b54199458eefbf92b6e23851739eabf407ef7b7b56db95dd7f13784aeee5e16dec02cbc41ad7a451272316442e1186a328cc4c7f0a4474c9abe9af6e34d4721077f22fbb47b59f204799deeb851322198e7257ab60560855b9de6128379286c22fa010945fb26676efc7524ed7453e5f884fb824be6548f3096b59f06fd048d0763f3e756d4bbcd54449fc9a3a41bed28232e415f3c757888f9d1d716319b20ee2c6b0ad76add60612814f187f11809a3ca84d4db4d3cd0a5b61a75b9e5b91073295575e87cf3ee3529cc2542158f297fcbfd37679526a1c6d71e421d0f52b86cd2bb6d41f10b58e7e125d74f47204e4cc1a1ac5ea1f4090fdb659060235359701c6b12c25002bacf1a1e355f4a56d4393bb08dbfae72c8e03d597388ba3a423c3562232699672e4ee67ff57d3db01fa9546b07feed8e3e68ffdef6197d4dcc54d4d735888835a61c9cd9c47c87aa7c4307bafaaa9ea39c28b15ae49fa5623bb15fa5f07fcf206ac0c4348c9c0c87f3d23188ba55c09fa2987e302efbdd0f0aeebcd407b89c823a841efe8b8d55bebbaa015ad49b016034d9dbb4ecc3c48491cdc11c172f4fbde2e501e628ebb2d89cadd1e2c0747e5e507697287a5759440101b271f568dcbd28fbdf2d196c6ad8aab550305a963f7f22e5ef50d4d6d05f39d4bf958c5cded6d6a6294ebd8010506be62417697d2fe9f48469f6d86b362e3ca6373b98993f9721bc648a9ff40e8b8c54dc543fc243e3151f0c3fc94c12752bbca5c7f648919289a8cf914708735a3588d989bd86aecdb20107e7595f904c194308bc1d977c86974504835be285cc7e7ce0db0f3eeb9c9de69bea3a6cfeb4b5d05c9c13e9a697defa5c46622e7a64a2baa9075b5e291cf85bf858d37aea2366c40efdda57d015a224d9d2730014473197b384d4bc0fd91ce91f15d1c8d486c63add0d1f5ff50374ae67ca6d3df5e61d88e33bc22c9fc51970cb1469a2141efb86aeeb28cbaae5cd4cebcc05eebb3f3c860d34bdebbd6bedbfa17e241670f7d01eb937973f41fcc36785a90488e2cd876d02f0e4b8d2475fd0780054ff2b313e98513eeec44a804b1ca96b7ed9834fc1f73b1c16d5c6104cd7d6ea3485ad2f0eb5aa424cbcc6322", 0x2000, &(0x7f0000006e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x90}, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000004280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006d00)='./file0/file0\x00', &(0x7f0000000180), 0x0) syz_fuse_handle_req(r0, &(0x7f0000006e80)="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", 0x2000, &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006880)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x405, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) 19:00:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x146, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x3d) 19:00:47 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/bus\x00', 0x0) 19:00:47 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:00:47 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000000040)=0x4) 19:00:48 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 19:00:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20441}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 19:00:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) 19:00:48 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 19:00:48 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 19:00:48 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="240000002000055bd25a80648c63940d329b5a6ddc73125e2d00000000008d2326560035", 0x24}], 0x1}, 0x0) [ 295.909941][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 19:00:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x20000010304, @multicast}, 0x0, {0x2, 0x0, @multicast1}}) 19:00:50 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 19:00:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000027daff56f", 0x31}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000300)) 19:00:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) 19:00:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20441}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 19:00:50 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 19:00:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5", 0x3a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x7) [ 297.775441][ T9070] FAT-fs (loop5): bread failed, FSINFO block (sector = 111) 19:00:50 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@multicast1=0xe0000002}, {}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 19:00:50 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40011) sendmsg$sock(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, 0x0) [ 297.909010][ T9070] FAT-fs (loop5): bread failed, FSINFO block (sector = 111) 19:00:50 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@multicast1=0xe0000002}, {}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 19:00:51 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:51 executing program 3: msgget(0x0, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() 19:00:51 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@multicast1=0xe0000002}, {}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 19:00:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:51 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:51 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@loopback=0x7f00002f}, {@multicast1=0xe0000002}, {}, {@dev}, {@multicast1}, {@private}, {@empty}]}]}}}}}}}, 0x0) 19:00:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20441}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 19:00:51 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:53 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:53 executing program 5: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:53 executing program 3: msgget(0x0, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() 19:00:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20441}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 19:00:53 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:53 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'permhat '}, 0x1b) 19:00:54 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:54 executing program 3: msgget(0x0, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() 19:00:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) 19:00:54 executing program 0: creat(&(0x7f0000000200)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x14}, 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) [ 301.155205][ T9172] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 301.715562][ T29] audit: type=1804 audit(1602183654.678:2): pid=9194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/18/bus" dev="sda1" ino=15935 res=1 errno=0 [ 301.846922][ T29] audit: type=1804 audit(1602183654.688:3): pid=9195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/18/bus" dev="sda1" ino=15935 res=1 errno=0 19:00:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 19:00:54 executing program 3: msgget(0x0, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getegid() 19:00:54 executing program 5: iopl(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 19:00:54 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [0x0, 0x0, 0x0, 0x11], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 19:00:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:00:55 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x5]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)) 19:00:55 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [0x0, 0x0, 0x0, 0x11], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 19:00:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r1}, 0x40) 19:00:55 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x5]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)) 19:00:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/171, 0xab}}], 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x4800, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) 19:00:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) 19:00:56 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000280)) wait4(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, 0x0, 0x4041, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./bus/file0\x00') 19:00:56 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [0x0, 0x0, 0x0, 0x11], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 19:00:56 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x5]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)) [ 304.169329][ T9256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 304.279237][ T9261] overlayfs: filesystem on './bus' not supported as upperdir 19:00:57 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x5]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)) 19:00:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) 19:00:57 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [0x0, 0x0, 0x0, 0x11], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 19:00:57 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000280)) wait4(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, 0x0, 0x4041, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./bus/file0\x00') 19:00:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) 19:00:57 executing program 1: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r0, 0x0, 0x7, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 19:00:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4d79eef5"}, 0x0, 0x0, @fd}) 19:00:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @local}, {0x6, @local}, 0x0, {0x2, 0x0, @loopback}, 'batadv0\x00'}) 19:00:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) 19:00:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 19:00:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) 19:00:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 305.248492][ T9282] overlayfs: failed to resolve './file0': -2 19:00:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "33470106b6d8e5b1bad5cfbc05bdcaf031bb97"}) [ 305.294259][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:00:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000540)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x1006, 0x8}}) 19:00:58 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000280)) wait4(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, 0x0, 0x4041, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./bus/file0\x00') [ 305.413830][ T9294] bridge1: port 1(macvlan0) entered blocking state [ 305.453824][ T9294] bridge1: port 1(macvlan0) entered disabled state [ 305.517110][ T9294] device macvlan0 entered promiscuous mode [ 305.550064][ T9294] bridge1: port 1(macvlan0) entered blocking state [ 305.556916][ T9294] bridge1: port 1(macvlan0) entered forwarding state 19:00:58 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x20002, 0x0) [ 305.763878][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.771248][ T9314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:00:58 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000280)) wait4(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffff9c, 0x0, 0x4041, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000580)='./bus/file0\x00') 19:00:58 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x16c0, 0x5e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 19:00:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 19:00:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 306.039665][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.080428][ T9319] device macvlan0 left promiscuous mode 19:00:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) [ 306.122593][ T9319] bridge1: port 1(macvlan0) entered disabled state 19:00:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) [ 306.244283][ T9319] bridge2: port 1(macvlan0) entered blocking state [ 306.280705][ T9329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:00:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x800, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b2f876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x264) [ 306.299331][ T9319] bridge2: port 1(macvlan0) entered disabled state [ 306.369351][ T9319] device macvlan0 entered promiscuous mode [ 306.385251][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 306.440733][ T9319] bridge2: port 1(macvlan0) entered blocking state [ 306.447417][ T9319] bridge2: port 1(macvlan0) entered forwarding state 19:00:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:00:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 19:00:59 executing program 5: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) [ 306.825978][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.842524][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.853314][ T5] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 306.862984][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:00:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) [ 306.876225][ T5] usb 5-1: config 0 descriptor?? [ 306.948458][ T5] usbhid 5-1:0.0: can't add hid device: -22 [ 306.958788][ T5] usbhid: probe of 5-1:0.0 failed with error -22 [ 307.015606][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:01:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:01:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) [ 307.097600][ T9359] device macvlan0 left promiscuous mode [ 307.104040][ T9359] bridge2: port 1(macvlan0) entered disabled state [ 307.155410][ T7921] usb 5-1: USB disconnect, device number 2 [ 307.165620][ T9359] bridge3: port 1(macvlan0) entered blocking state [ 307.177686][ T9359] bridge3: port 1(macvlan0) entered disabled state [ 307.248464][ T9359] device macvlan0 entered promiscuous mode [ 307.279985][ T9359] bridge3: port 1(macvlan0) entered blocking state [ 307.286705][ T9359] bridge3: port 1(macvlan0) entered forwarding state [ 307.955342][ T2666] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.365585][ T2666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.376601][ T2666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.393107][ T2666] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 308.402449][ T2666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.418503][ T2666] usb 5-1: config 0 descriptor?? [ 308.467971][ T2666] usbhid 5-1:0.0: can't add hid device: -22 [ 308.474045][ T2666] usbhid: probe of 5-1:0.0 failed with error -22 19:01:01 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x16c0, 0x5e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 19:01:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 19:01:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r5, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}]}, 0x24}}, 0x0) 19:01:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:01:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:01:01 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f0000000140)="083d906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000000080)={[{@utf8='utf8=1'}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000280)=""/184, 0xb8) [ 308.668370][ T17] usb 5-1: USB disconnect, device number 3 [ 308.793777][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.827437][ T9404] device macvlan0 left promiscuous mode [ 308.834480][ T9404] bridge3: port 1(macvlan0) entered disabled state [ 308.847468][ T9404] bridge4: port 1(macvlan0) entered blocking state [ 308.854240][ T9404] bridge4: port 1(macvlan0) entered disabled state [ 308.865023][ T9404] device macvlan0 entered promiscuous mode [ 308.874926][ T9404] bridge4: port 1(macvlan0) entered blocking state [ 308.881618][ T9404] bridge4: port 1(macvlan0) entered forwarding state 19:01:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b45, 0x3) 19:01:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 19:01:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:01:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x58, 0x1200a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03070006000800fdff000b00000004000180"], 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 19:01:02 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 19:01:02 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) [ 309.197254][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.350330][ T29] audit: type=1804 audit(1602183662.317:4): pid=9438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/37/bus" dev="sda1" ino=15996 res=1 errno=0 [ 309.461871][ T29] audit: type=1804 audit(1602183662.417:5): pid=9440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/37/bus" dev="sda1" ino=15996 res=1 errno=0 [ 309.595913][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.622672][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.662192][ T17] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 309.711261][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.747948][ T17] usb 5-1: config 0 descriptor?? [ 309.807463][ T17] usbhid 5-1:0.0: can't add hid device: -22 [ 309.813554][ T17] usbhid: probe of 5-1:0.0 failed with error -22 [ 310.085236][ T5] usb 5-1: USB disconnect, device number 4 [ 310.120292][ T29] audit: type=1804 audit(1602183663.087:6): pid=9440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/37/bus" dev="sda1" ino=15996 res=1 errno=0 19:01:03 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x16c0, 0x5e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 19:01:03 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0xe8, 0x288, 0x1b8, 0x288, 0x378, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_macvtap\x00', 'xfrm0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @local, [], [], 'veth0_to_batadv\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'vlan0\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 19:01:03 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 19:01:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 19:01:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff6, 0x0, &(0x7f0000000040), 0x0) 19:01:03 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 19:01:03 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 310.722178][ T9468] xt_CONNSECMARK: invalid mode: 0 [ 310.738857][ T29] audit: type=1804 audit(1602183663.707:7): pid=9465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/38/bus" dev="sda1" ino=16008 res=1 errno=0 19:01:03 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 19:01:03 executing program 2: mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x400, 0x70bd28, 0x25dfdbfe, {{'authenc(cbcmac-aes-ce,fpu(pcbc(aes)))\x00'}, [], [], 0x0, 0x2400}, ["", "", ""]}, 0xe0}}, 0x20004844) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) dup(0xffffffffffffffff) 19:01:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 310.859200][ T29] audit: type=1804 audit(1602183663.807:8): pid=9477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/38/bus" dev="sda1" ino=16008 res=1 errno=0 19:01:04 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) [ 311.031760][ T29] audit: type=1804 audit(1602183663.947:9): pid=9481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/32/bus" dev="sda1" ino=16001 res=1 errno=0 [ 311.102159][ T9485] new mount options do not match the existing superblock, will be ignored [ 311.113486][ T2666] usb 5-1: new high-speed USB device number 5 using dummy_hcd 19:01:04 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 311.224865][ T9485] new mount options do not match the existing superblock, will be ignored [ 311.263384][ T29] audit: type=1804 audit(1602183664.057:10): pid=9488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/32/bus" dev="sda1" ino=16001 res=1 errno=0 [ 311.473966][ T29] audit: type=1804 audit(1602183664.437:11): pid=9497 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/33/bus" dev="sda1" ino=16000 res=1 errno=0 [ 311.485648][ T2666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.559391][ T2666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.596631][ T29] audit: type=1804 audit(1602183664.537:12): pid=9499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir099394784/syzkaller.4OvMaV/33/bus" dev="sda1" ino=16000 res=1 errno=0 [ 311.600241][ T2666] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 311.659342][ T2666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.676281][ T2666] usb 5-1: config 0 descriptor?? [ 311.717648][ T2666] usbhid 5-1:0.0: can't add hid device: -22 [ 311.723703][ T2666] usbhid: probe of 5-1:0.0 failed with error -22 [ 311.947466][ T2477] usb 5-1: USB disconnect, device number 5 19:01:05 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x16c0, 0x5e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 19:01:05 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 19:01:05 executing program 2: mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x400, 0x70bd28, 0x25dfdbfe, {{'authenc(cbcmac-aes-ce,fpu(pcbc(aes)))\x00'}, [], [], 0x0, 0x2400}, ["", "", ""]}, 0xe0}}, 0x20004844) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) dup(0xffffffffffffffff) 19:01:05 executing program 1: r0 = open(&(0x7f0000002000)='./bus\x00', 0x103040, 0x0) clone(0x3a3dd40084848f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xfffffffffffeffff) 19:01:05 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 19:01:05 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 312.580528][ T9527] EXT4-fs warning (device sda1): ext4_group_extend:1807: will only finish group (524288 blocks, 256 new) [ 312.580664][ T29] audit: type=1804 audit(1602183665.547:13): pid=9523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir972797646/syzkaller.ZSQvN9/39/bus" dev="sda1" ino=16027 res=1 errno=0 [ 312.608947][ T9525] new mount options do not match the existing superblock, will be ignored 19:01:05 executing program 1: syz_mount_image$adfs(&(0x7f0000000380)='adfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)={[], [{@uid_eq={'uid'}}]}) [ 312.693155][ T9527] EXT4-fs warning (device sda1): ext4_group_extend:1813: can't read last block, resize aborted 19:01:05 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 19:01:05 executing program 2: mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x400, 0x70bd28, 0x25dfdbfe, {{'authenc(cbcmac-aes-ce,fpu(pcbc(aes)))\x00'}, [], [], 0x0, 0x2400}, ["", "", ""]}, 0xe0}}, 0x20004844) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) dup(0xffffffffffffffff) 19:01:05 executing program 5: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[], 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x3e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 312.935721][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 312.968356][ T9543] ADFS-fs (loop1): error: can't find an ADFS filesystem on dev loop1. [ 313.114610][ T9551] new mount options do not match the existing superblock, will be ignored [ 313.149533][ T9543] ADFS-fs (loop1): error: can't find an ADFS filesystem on dev loop1. 19:01:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) 19:01:06 executing program 1: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 313.296226][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.341142][ T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.412448][ T17] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 313.453705][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.493039][ T17] usb 5-1: config 0 descriptor?? [ 313.569462][ T17] usbhid 5-1:0.0: can't add hid device: -22 [ 313.590324][ T9561] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 313.631291][ T17] usbhid: probe of 5-1:0.0 failed with error -22 [ 313.776481][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.833191][ T17] usb 5-1: USB disconnect, device number 6 [ 313.904278][ T9564] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 313.919414][ T9561] syz-executor.1 (9561) used greatest stack depth: 22456 bytes left 19:01:07 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:01:07 executing program 2: mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x400, 0x70bd28, 0x25dfdbfe, {{'authenc(cbcmac-aes-ce,fpu(pcbc(aes)))\x00'}, [], [], 0x0, 0x2400}, ["", "", ""]}, 0xe0}}, 0x20004844) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) dup(0xffffffffffffffff) 19:01:07 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) 19:01:07 executing program 1: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 19:01:07 executing program 4: socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1c4, &(0x7f0000000580)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G\xe3\xd6\x9dB\xa9\xfd\x88\xf0\xa9\x1f\xb6\xbe\x90\x9a\xd6\x8eznyW\t}I7&'}, 0x30) socket$kcm(0x2b, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x11f4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) [ 314.544288][ T9584] new mount options do not match the existing superblock, will be ignored 19:01:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:01:07 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:01:07 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3e) 19:01:07 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r4, &(0x7f0000000140), 0xfffffefa) [ 315.273496][ T9613] handle_userfault: 5 callbacks suppressed [ 315.273537][ T9613] FAULT_FLAG_ALLOW_RETRY missing 80 [ 315.344380][ T9613] CPU: 0 PID: 9613 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 315.354232][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.364369][ T9613] Call Trace: [ 315.367734][ T9613] dump_stack+0x198/0x1fb [ 315.372111][ T9613] handle_userfault.cold+0x3d/0x4e [ 315.377334][ T9613] ? fs_reclaim_release+0x90/0xd0 [ 315.382416][ T9613] ? userfaultfd_ioctl+0x3300/0x3300 [ 315.387729][ T9613] ? lock_is_held_type+0xbb/0xf0 [ 315.392678][ T9613] ? find_held_lock+0x2d/0x110 [ 315.397498][ T9613] ? do_huge_pmd_anonymous_page+0xd1f/0x2200 [ 315.403494][ T9613] ? lock_downgrade+0x830/0x830 [ 315.408357][ T9613] ? do_raw_spin_lock+0x120/0x2b0 [ 315.413400][ T9613] ? rwlock_bug.part.0+0x90/0x90 [ 315.418371][ T9613] do_huge_pmd_anonymous_page+0xd2c/0x2200 [ 315.424273][ T9613] handle_mm_fault+0x3644/0x4530 [ 315.429248][ T9613] ? vm_iomap_memory+0x190/0x190 [ 315.434210][ T9613] ? pud_huge+0xbd/0x120 [ 315.438489][ T9613] ? follow_page_mask+0xc7/0x1df0 [ 315.443537][ T9613] __get_user_pages+0x76b/0x1660 [ 315.448528][ T9613] ? follow_page_mask+0x1df0/0x1df0 [ 315.453765][ T9613] ? lock_release+0x890/0x890 [ 315.458470][ T9613] ? lock_is_held_type+0xbb/0xf0 [ 315.463550][ T9613] __get_user_pages_remote+0x18f/0x7a0 [ 315.469103][ T9613] ? down_read_killable+0x90/0x460 [ 315.474252][ T9613] get_user_pages_remote+0x63/0x90 [ 315.479391][ T9613] __access_remote_vm+0x237/0x5d0 [ 315.484447][ T9613] ? generic_access_phys+0x1b0/0x1b0 [ 315.489810][ T9613] environ_read+0x315/0x430 [ 315.494340][ T9613] ? mem_write+0x60/0x60 [ 315.498694][ T9613] vfs_read+0x1b5/0x570 [ 315.502876][ T9613] ksys_read+0x12d/0x250 [ 315.507156][ T9613] ? vfs_write+0x700/0x700 [ 315.511772][ T9613] ? check_preemption_disabled+0x50/0x130 [ 315.517522][ T9613] ? syscall_enter_from_user_mode+0x1d/0x60 [ 315.523439][ T9613] do_syscall_64+0x2d/0x70 [ 315.527881][ T9613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 315.533794][ T9613] RIP: 0033:0x45de29 [ 315.537708][ T9613] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.557359][ T9613] RSP: 002b:00007f2cee456c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.565798][ T9613] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de29 [ 315.573809][ T9613] RDX: 00000000fffffefa RSI: 0000000020000140 RDI: 0000000000000006 [ 315.581793][ T9613] RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000 [ 315.589778][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 315.597765][ T9613] R13: 00007ffd959176af R14: 00007f2cee4579c0 R15: 000000000118bfd4 19:01:08 executing program 1: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 19:01:08 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="13011003000000102505a8a440000100030109022c00010106"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, 0x0) 19:01:08 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:01:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@int, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}}, 0x0, 0x56}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:01:09 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:01:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xd8, 0xd8, 0xc8, 0xd8, 0x1b8, 0x268, 0x268, 0x1b8, 0x268, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@remote, @loopback, [], [], 'wlan0\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'caif0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) [ 316.105866][ C0] [ 316.108235][ C0] ================================ [ 316.113333][ C0] WARNING: inconsistent lock state [ 316.118435][ C0] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 316.124935][ C0] -------------------------------- [ 316.130038][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 316.136888][ C0] kworker/u4:1/21 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 316.143208][ C0] ffff88801c5fd018 (&xa->xa_lock#9){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 [ 316.151928][ C0] {SOFTIRQ-ON-W} state was registered at: [ 316.157652][ C0] lock_acquire+0x1f2/0xaa0 [ 316.162253][ C0] _raw_spin_lock+0x2a/0x40 [ 316.166922][ C0] io_uring_add_task_file+0x207/0x430 [ 316.172388][ C0] io_uring_setup+0x2727/0x3660 [ 316.177323][ C0] do_syscall_64+0x2d/0x70 [ 316.181830][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 316.187836][ C0] irq event stamp: 907413 [ 316.189451][ T9639] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 316.192168][ C0] hardirqs last enabled at (907412): [] _raw_spin_unlock_irqrestore+0x6f/0x90 [ 316.192193][ C0] hardirqs last disabled at (907413): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 316.222245][ C0] softirqs last enabled at (907390): [] asm_call_irq_on_stack+0xf/0x20 [ 316.232152][ C0] softirqs last disabled at (907393): [] asm_call_irq_on_stack+0xf/0x20 [ 316.242039][ C0] [ 316.242039][ C0] other info that might help us debug this: [ 316.250102][ C0] Possible unsafe locking scenario: [ 316.250102][ C0] [ 316.257546][ C0] CPU0 [ 316.260835][ C0] ---- [ 316.264099][ C0] lock(&xa->xa_lock#9); [ 316.268425][ C0] [ 316.271865][ C0] lock(&xa->xa_lock#9); [ 316.276387][ C0] [ 316.276387][ C0] *** DEADLOCK *** [ 316.276387][ C0] [ 316.284522][ C0] 5 locks held by kworker/u4:1/21: [ 316.289635][ C0] #0: ffff888020451938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x821/0x15a0 [ 316.300342][ C0] #1: ffffc90000dd7da8 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x854/0x15a0 [ 316.313996][ C0] #2: ffff8880114ea908 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{3:3}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x5c0/0x800 [ 316.327732][ C0] #3: ffffffff8a554da0 (rcu_read_lock){....}-{1:2}, at: batadv_iv_ogm_schedule_buff+0x596/0x1410 [ 316.338345][ C0] #4: ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 316.347300][ C0] [ 316.347300][ C0] stack backtrace: [ 316.353187][ C0] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 316.362636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.372707][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 316.380527][ C0] Call Trace: [ 316.383806][ C0] [ 316.386650][ C0] dump_stack+0x198/0x1fb [ 316.391004][ C0] mark_lock.cold+0x32/0x74 [ 316.395501][ C0] ? __lock_acquire+0xbb9/0x56d0 [ 316.400432][ C0] ? lock_chain_count+0x20/0x20 [ 316.405281][ C0] ? mark_lock+0xf7/0x2420 [ 316.409696][ C0] ? lock_chain_count+0x20/0x20 [ 316.414557][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 316.420534][ C0] __lock_acquire+0x118a/0x56d0 [ 316.425381][ C0] ? lock_chain_count+0x20/0x20 [ 316.430235][ C0] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 316.436213][ C0] lock_acquire+0x1f2/0xaa0 [ 316.440714][ C0] ? xa_destroy+0xaa/0x350 [ 316.445144][ C0] ? lock_release+0x890/0x890 [ 316.449821][ C0] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 316.455209][ C0] _raw_spin_lock_irqsave+0x94/0xd0 [ 316.460427][ C0] ? xa_destroy+0xaa/0x350 [ 316.464832][ C0] xa_destroy+0xaa/0x350 [ 316.469088][ C0] ? xas_pause+0x3b0/0x3b0 [ 316.473495][ C0] ? lock_acquire+0x1f2/0xaa0 [ 316.478177][ C0] ? lock_release+0x890/0x890 [ 316.482955][ C0] ? free_obj_work+0x5b0/0x5b0 [ 316.487731][ C0] ? lock_downgrade+0x830/0x830 [ 316.492591][ C0] __io_uring_free+0x60/0xc0 [ 316.497178][ C0] __put_task_struct+0xff/0x3f0 [ 316.502022][ C0] delayed_put_task_struct+0x1f6/0x340 [ 316.507474][ C0] rcu_core+0x645/0x1240 [ 316.511717][ C0] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 316.516734][ C0] ? mark_held_locks+0x9f/0xe0 [ 316.521494][ C0] ? lock_is_held_type+0xbb/0xf0 [ 316.526429][ C0] __do_softirq+0x203/0xab6 [ 316.530931][ C0] asm_call_irq_on_stack+0xf/0x20 [ 316.535943][ C0] [ 316.538880][ C0] do_softirq_own_stack+0x9b/0xd0 [ 316.543926][ C0] irq_exit_rcu+0x235/0x280 [ 316.548433][ C0] sysvec_apic_timer_interrupt+0x51/0xf0 [ 316.554062][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 316.560049][ C0] RIP: 0010:lock_acquire+0x27b/0xaa0 [ 316.565326][ C0] Code: 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 d2 06 00 00 48 83 3d d9 c7 e1 08 00 0f 84 2d 05 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 [ 316.585019][ C0] RSP: 0018:ffffc90000dd7ab0 EFLAGS: 00000282 [ 316.591086][ C0] RAX: 1ffffffff147a03d RBX: 1ffff920001baf59 RCX: 00000000f6ff146a [ 316.599056][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000282 [ 316.607043][ C0] RBP: ffff88800fc52580 R08: 0000000000000000 R09: ffffffff8d7329a7 [ 316.615015][ C0] R10: fffffbfff1ae6534 R11: 0000000000000000 R12: 0000000000000002 [ 316.622985][ C0] R13: 0000000000000000 R14: ffffffff8a554da0 R15: 0000000000000000 [ 316.630969][ C0] ? lock_release+0x890/0x890 [ 316.635654][ C0] ? lock_downgrade+0x830/0x830 [ 316.640505][ C0] ? __mutex_lock+0x626/0x10e0 [ 316.645272][ C0] batadv_iv_ogm_schedule_buff+0x5d0/0x1410 [ 316.651169][ C0] ? batadv_iv_ogm_schedule_buff+0x596/0x1410 [ 316.657246][ C0] ? batadv_iv_ogm_orig_dump+0xd30/0xd30 [ 316.662966][ C0] ? batadv_send_skb_packet+0x4df/0x5f0 [ 316.668537][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x5c8/0x800 [ 316.675689][ C0] process_one_work+0x933/0x15a0 [ 316.680630][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 316.686004][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 316.690945][ C0] worker_thread+0x64c/0x1120 [ 316.695629][ C0] ? process_one_work+0x15a0/0x15a0 [ 316.700827][ C0] kthread+0x3af/0x4a0 [ 316.704898][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 316.710008][ C0] ret_from_fork+0x1f/0x30 [ 316.797487][ T7] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.808128][ T7921] usb 3-1: new high-speed USB device number 2 using dummy_hcd 19:01:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600140001400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 19:01:09 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r4, &(0x7f0000000140), 0xfffffefa) 19:01:09 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) [ 316.998140][ T9655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:01:10 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) [ 317.050730][ T7] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.065945][ T7921] usb 3-1: Using ep0 maxpacket: 16 [ 317.081065][ T9656] FAULT_FLAG_ALLOW_RETRY missing 80 [ 317.107665][ T9656] CPU: 1 PID: 9656 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 317.107865][ T9652] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.117516][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.117522][ T9656] Call Trace: [ 317.117547][ T9656] dump_stack+0x198/0x1fb [ 317.117565][ T9656] handle_userfault.cold+0x3d/0x4e [ 317.117584][ T9656] ? rwlock_bug.part.0+0x90/0x90 [ 317.117598][ T9656] ? userfaultfd_ioctl+0x3300/0x3300 [ 317.117611][ T9656] ? lock_acquire+0x1f2/0xaa0 [ 317.117629][ T9656] ? do_huge_pmd_anonymous_page+0xbad/0x2200 [ 317.117647][ T9656] ? do_huge_pmd_anonymous_page+0xd1f/0x2200 [ 317.117660][ T9656] ? lock_downgrade+0x830/0x830 [ 317.117674][ T9656] ? do_raw_spin_lock+0x120/0x2b0 [ 317.117700][ T9656] ? rwlock_bug.part.0+0x90/0x90 [ 317.117728][ T9656] do_huge_pmd_anonymous_page+0xd2c/0x2200 [ 317.143276][ T9652] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 317.148215][ T9656] handle_mm_fault+0x3644/0x4530 [ 317.148234][ T9656] ? vm_iomap_memory+0x190/0x190 [ 317.148246][ T9656] ? pud_huge+0xbd/0x120 [ 317.148261][ T9656] ? follow_page_mask+0xc7/0x1df0 [ 317.148274][ T9656] __get_user_pages+0x76b/0x1660 [ 317.148290][ T9656] ? follow_page_mask+0x1df0/0x1df0 [ 317.148304][ T9656] ? lock_release+0x890/0x890 [ 317.148321][ T9656] __get_user_pages_remote+0x18f/0x7a0 [ 317.148337][ T9656] ? down_read_killable+0x90/0x460 [ 317.148351][ T9656] get_user_pages_remote+0x63/0x90 [ 317.148372][ T9656] __access_remote_vm+0x237/0x5d0 [ 317.176481][ T9652] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 317.180440][ T9656] ? generic_access_phys+0x1b0/0x1b0 [ 317.180456][ T9656] ? do_raw_spin_lock+0x120/0x2b0 [ 317.180476][ T9656] environ_read+0x315/0x430 [ 317.180497][ T9656] ? mem_write+0x60/0x60 [ 317.287620][ T9656] vfs_read+0x1b5/0x570 [ 317.291773][ T9656] ksys_read+0x12d/0x250 [ 317.296025][ T9656] ? vfs_write+0x700/0x700 [ 317.300437][ T9656] ? check_preemption_disabled+0x50/0x130 [ 317.306158][ T9656] ? syscall_enter_from_user_mode+0x1d/0x60 [ 317.312053][ T9656] do_syscall_64+0x2d/0x70 [ 317.316467][ T9656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 317.322355][ T9656] RIP: 0033:0x45de29 [ 317.326253][ T9656] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.345859][ T9656] RSP: 002b:00007f2cee456c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.354291][ T9656] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de29 [ 317.362266][ T9656] RDX: 00000000fffffefa RSI: 0000000020000140 RDI: 0000000000000006 [ 317.370241][ T9656] RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000 [ 317.378211][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 317.386187][ T9656] R13: 00007ffd959176af R14: 00007f2cee4579c0 R15: 000000000118bfd4 19:01:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 19:01:10 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) [ 317.486285][ T7921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.576236][ T7921] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 317.592090][ T7921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.625115][ T7921] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 317.789930][ T7921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 317.805831][ T7921] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 317.834191][ T7921] usb 3-1: Manufacturer: syz [ 317.854656][ T7921] usb 3-1: SerialNumber: syz [ 317.980545][ T7] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.150577][ T7] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.331376][ T23] usb 3-1: USB disconnect, device number 2 [ 319.166279][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 319.416149][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 319.550102][ T7] device macvlan0 left promiscuous mode [ 319.555912][ T7] bridge4: port 1(macvlan0) entered disabled state [ 319.568607][ T7] device hsr_slave_0 left promiscuous mode [ 319.574745][ T7] device hsr_slave_1 left promiscuous mode [ 319.581170][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.588650][ T7] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.597650][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.605059][ T7] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.614114][ T7] device bridge_slave_1 left promiscuous mode [ 319.621581][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.629384][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.639064][ T7] device bridge_slave_0 left promiscuous mode [ 319.645201][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.657488][ T7] device veth1_macvtap left promiscuous mode [ 319.663512][ T7] device veth0_macvtap left promiscuous mode [ 319.673065][ T7] device veth1_vlan left promiscuous mode [ 319.696415][ T7] device veth0_vlan left promiscuous mode [ 319.726223][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 319.733829][ T23] usb 3-1: can't read configurations, error -71 [ 321.120779][ T7] team0 (unregistering): Port device team_slave_1 removed [ 321.130949][ T7] team0 (unregistering): Port device team_slave_0 removed [ 321.142162][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.154534][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.188438][ T7] bond0 (unregistering): Released all slaves [ 321.423287][ T9722] IPVS: ftp: loaded support on port[0] = 21 [ 321.557643][ T9722] chnl_net:caif_netlink_parms(): no params data found [ 321.621074][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.636377][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.643978][ T9722] device bridge_slave_0 entered promiscuous mode [ 321.654776][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.662918][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.671574][ T9722] device bridge_slave_1 entered promiscuous mode [ 321.699549][ T9722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.715363][ T9722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.747715][ T9722] team0: Port device team_slave_0 added [ 321.756187][ T9722] team0: Port device team_slave_1 added [ 321.784530][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.792193][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.819949][ T9722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.834452][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.842330][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.869654][ T9722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.899583][ T9722] device hsr_slave_0 entered promiscuous mode [ 321.908052][ T9722] device hsr_slave_1 entered promiscuous mode [ 321.914625][ T9722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.922942][ T9722] Cannot create hsr debugfs directory [ 322.024446][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.031594][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.038996][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.046048][ T9722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.092899][ T9722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.107867][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.117366][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.124807][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.137576][ T9722] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.149596][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.159014][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.166068][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.186879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.195277][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.202410][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.213400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.222700][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.247900][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.256178][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.271428][ T9722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.283224][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.292558][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.301247][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.323881][ T9722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.331048][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.339864][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.378030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.387941][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.407014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.415237][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.424681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.433048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.443658][ T9722] device veth0_vlan entered promiscuous mode [ 322.454886][ T9722] device veth1_vlan entered promiscuous mode [ 322.476135][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.484571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.493076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.501742][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.513182][ T9722] device veth0_macvtap entered promiscuous mode [ 322.524333][ T9722] device veth1_macvtap entered promiscuous mode [ 322.540734][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.551899][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.561781][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.572285][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.583414][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.593906][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.603825][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.614266][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.624456][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.634935][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.645784][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.654738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.663860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.671878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.680604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.691716][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.703730][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.714330][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.725551][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.735741][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.747392][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.757313][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.768246][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.778114][ T9722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.788570][ T9722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.799398][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.809940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.819466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.854095][ T9722] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 322.889735][ T115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.894008][ T9722] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 322.898929][ T115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.923509][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.950289][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.958296][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.965696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.028880][ T9952] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:01:16 executing program 1: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 19:01:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) select(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x100, 0x4, 0xcb8, 0x3, 0x8f, 0x57, 0x4de9, 0x3}, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)) r0 = fsopen(&(0x7f0000000400)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x284c01) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfffffffffffff1c1) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001680)='SEG6\x00') connect$rxrpc(0xffffffffffffffff, &(0x7f0000001840)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x1, @local, 0x80000001}}, 0x24) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x453, 0x400, 0x70bd26, 0x0, "fe", ["", "", "", "", ""]}, 0x14}}, 0x80) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001980)='\x00', &(0x7f00000019c0)='\x00', 0x0) 19:01:16 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) 19:01:16 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r4, &(0x7f0000000140), 0xfffffefa) 19:01:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x2f06, 0x0) 19:01:16 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="13011003000000102505a8a440000100030109022c00010106"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, 0x0) [ 323.091648][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.189132][ T29] audit: type=1107 audit(1602183676.156:19): pid=9956 uid=0 auid=0 ses=4 subj==unconfined msg='þ' [ 323.208926][ T9961] FAULT_FLAG_ALLOW_RETRY missing 80 [ 323.214173][ T9961] CPU: 1 PID: 9961 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 323.223987][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.234047][ T9961] Call Trace: [ 323.237348][ T9961] dump_stack+0x198/0x1fb [ 323.241690][ T9961] handle_userfault.cold+0x3d/0x4e [ 323.242511][ T29] audit: type=1107 audit(1602183676.166:20): pid=9956 uid=0 auid=0 ses=4 subj==unconfined msg='þ' [ 323.246808][ T9961] ? lock_release+0x890/0x890 [ 323.246827][ T9961] ? fs_reclaim_release+0x90/0xd0 [ 323.246844][ T9961] ? userfaultfd_ioctl+0x3300/0x3300 [ 323.246859][ T9961] ? lock_acquire+0x1f2/0xaa0 [ 323.246879][ T9961] ? do_huge_pmd_anonymous_page+0xbad/0x2200 [ 323.246896][ T9961] ? do_huge_pmd_anonymous_page+0xd1f/0x2200 [ 323.246911][ T9961] ? lock_downgrade+0x830/0x830 [ 323.246927][ T9961] ? do_raw_spin_lock+0x120/0x2b0 [ 323.246944][ T9961] ? rwlock_bug.part.0+0x90/0x90 [ 323.246963][ T9961] do_huge_pmd_anonymous_page+0xd2c/0x2200 [ 323.246981][ T9961] handle_mm_fault+0x3644/0x4530 [ 323.247000][ T9961] ? vm_iomap_memory+0x190/0x190 [ 323.247015][ T9961] ? pud_huge+0xbd/0x120 [ 323.247033][ T9961] ? follow_page_mask+0xc7/0x1df0 [ 323.247049][ T9961] __get_user_pages+0x76b/0x1660 [ 323.247068][ T9961] ? follow_page_mask+0x1df0/0x1df0 19:01:16 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}, {@dyn='dyn'}, {@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}]}) [ 323.247083][ T9961] ? lock_release+0x890/0x890 [ 323.247101][ T9961] __get_user_pages_remote+0x18f/0x7a0 [ 323.247120][ T9961] ? down_read_killable+0x90/0x460 [ 323.247137][ T9961] get_user_pages_remote+0x63/0x90 [ 323.247156][ T9961] __access_remote_vm+0x237/0x5d0 [ 323.247175][ T9961] ? generic_access_phys+0x1b0/0x1b0 [ 323.247200][ T9961] ? do_raw_spin_lock+0x120/0x2b0 [ 323.374895][ T9961] environ_read+0x315/0x430 [ 323.379407][ T9961] ? mem_write+0x60/0x60 [ 323.383655][ T9961] vfs_read+0x1b5/0x570 19:01:16 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}, {@dyn='dyn'}, {@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}]}) 19:01:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) select(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x100, 0x4, 0xcb8, 0x3, 0x8f, 0x57, 0x4de9, 0x3}, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)) r0 = fsopen(&(0x7f0000000400)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x284c01) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfffffffffffff1c1) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001680)='SEG6\x00') connect$rxrpc(0xffffffffffffffff, &(0x7f0000001840)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x1, @local, 0x80000001}}, 0x24) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x453, 0x400, 0x70bd26, 0x0, "fe", ["", "", "", "", ""]}, 0x14}}, 0x80) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001980)='\x00', &(0x7f00000019c0)='\x00', 0x0) [ 323.387813][ T9961] ksys_read+0x12d/0x250 [ 323.392054][ T9961] ? vfs_write+0x700/0x700 [ 323.396472][ T9961] ? check_preemption_disabled+0x50/0x130 [ 323.402201][ T9961] ? syscall_enter_from_user_mode+0x1d/0x60 [ 323.408107][ T9961] do_syscall_64+0x2d/0x70 [ 323.412528][ T9961] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 323.418430][ T9961] RIP: 0033:0x45de29 [ 323.422333][ T9961] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.441945][ T9961] RSP: 002b:00007f2cee477c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.446752][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 323.450392][ T9961] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de29 [ 323.450401][ T9961] RDX: 00000000fffffefa RSI: 0000000020000140 RDI: 0000000000000006 [ 323.450410][ T9961] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 323.450428][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c 19:01:16 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 323.488386][ T9961] R13: 00007ffd959176af R14: 00007f2cee4789c0 R15: 000000000118bf2c [ 323.506563][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.525774][ T29] audit: type=1107 audit(1602183676.486:21): pid=9974 uid=0 auid=0 ses=4 subj==unconfined msg='þ' 19:01:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) select(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x100, 0x4, 0xcb8, 0x3, 0x8f, 0x57, 0x4de9, 0x3}, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)) r0 = fsopen(&(0x7f0000000400)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x284c01) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfffffffffffff1c1) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001680)='SEG6\x00') connect$rxrpc(0xffffffffffffffff, &(0x7f0000001840)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x1, @local, 0x80000001}}, 0x24) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x453, 0x400, 0x70bd26, 0x0, "fe", ["", "", "", "", ""]}, 0x14}}, 0x80) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001980)='\x00', &(0x7f00000019c0)='\x00', 0x0) 19:01:16 executing program 5: clock_gettime(0x0, &(0x7f0000000000)) select(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x100, 0x4, 0xcb8, 0x3, 0x8f, 0x57, 0x4de9, 0x3}, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)) r0 = fsopen(&(0x7f0000000400)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x284c01) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xfffffffffffff1c1) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001680)='SEG6\x00') connect$rxrpc(0xffffffffffffffff, &(0x7f0000001840)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x1, @local, 0x80000001}}, 0x24) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x453, 0x400, 0x70bd26, 0x0, "fe", ["", "", "", "", ""]}, 0x14}}, 0x80) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001980)='\x00', &(0x7f00000019c0)='\x00', 0x0) [ 323.684542][ T29] audit: type=1107 audit(1602183676.646:22): pid=9988 uid=0 auid=0 ses=4 subj==unconfined msg='þ' [ 323.758822][ T12] usb 3-1: Using ep0 maxpacket: 16 19:01:16 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}, {@dyn='dyn'}, {@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}]}) 19:01:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000380)={0x5}) 19:01:16 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r4, &(0x7f0000000140), 0xfffffefa) 19:01:16 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) [ 323.842579][ T29] audit: type=1107 audit(1602183676.806:23): pid=9997 uid=0 auid=0 ses=4 subj==unconfined msg='þ' 19:01:16 executing program 3: syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}, {@dyn='dyn'}, {@source={'source', 0x3d, '%^]$[+%](${:\x0fk[)-:'}}]}) [ 323.919356][ T12] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.996044][T10007] FAULT_FLAG_ALLOW_RETRY missing 80 [ 324.007033][ T12] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 324.015436][ T12] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.033603][T10007] CPU: 0 PID: 10007 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 324.043518][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.053590][T10007] Call Trace: [ 324.056891][T10007] dump_stack+0x198/0x1fb [ 324.061228][T10007] handle_userfault.cold+0x3d/0x4e [ 324.066343][T10007] ? lock_release+0x890/0x890 [ 324.071024][T10007] ? fs_reclaim_release+0x90/0xd0 [ 324.076059][T10007] ? userfaultfd_ioctl+0x3300/0x3300 [ 324.081349][T10007] ? lock_acquire+0x1f2/0xaa0 [ 324.086033][T10007] ? do_huge_pmd_anonymous_page+0xbad/0x2200 [ 324.092020][T10007] ? do_huge_pmd_anonymous_page+0xd1f/0x2200 [ 324.098010][T10007] ? lock_downgrade+0x830/0x830 [ 324.102869][T10007] ? do_raw_spin_lock+0x120/0x2b0 [ 324.107904][T10007] ? rwlock_bug.part.0+0x90/0x90 [ 324.112859][T10007] do_huge_pmd_anonymous_page+0xd2c/0x2200 [ 324.118680][T10007] handle_mm_fault+0x3644/0x4530 [ 324.123634][T10007] ? vm_iomap_memory+0x190/0x190 [ 324.128585][T10007] ? pud_huge+0xbd/0x120 [ 324.132835][T10007] ? follow_page_mask+0xc7/0x1df0 [ 324.137866][T10007] __get_user_pages+0x76b/0x1660 [ 324.142839][T10007] ? follow_page_mask+0x1df0/0x1df0 [ 324.148035][T10007] ? lock_release+0x890/0x890 [ 324.152716][T10007] __get_user_pages_remote+0x18f/0x7a0 [ 324.158188][T10007] ? down_read_killable+0x90/0x460 [ 324.163309][T10007] get_user_pages_remote+0x63/0x90 [ 324.168423][T10007] __access_remote_vm+0x237/0x5d0 [ 324.173454][T10007] ? generic_access_phys+0x1b0/0x1b0 [ 324.178744][T10007] ? do_raw_spin_lock+0x120/0x2b0 [ 324.183775][T10007] environ_read+0x315/0x430 [ 324.188280][T10007] ? mem_write+0x60/0x60 [ 324.192529][T10007] vfs_read+0x1b5/0x570 [ 324.196695][T10007] ksys_read+0x12d/0x250 [ 324.200942][T10007] ? vfs_write+0x700/0x700 [ 324.205365][T10007] ? check_preemption_disabled+0x50/0x130 [ 324.211113][T10007] ? syscall_enter_from_user_mode+0x1d/0x60 [ 324.217037][T10007] do_syscall_64+0x2d/0x70 [ 324.221464][T10007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 324.227356][T10007] RIP: 0033:0x45de29 [ 324.231254][T10007] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.250864][T10007] RSP: 002b:00007f2cee456c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.259294][T10007] RAX: ffffffffffffffda RBX: 0000000000026500 RCX: 000000000045de29 [ 324.267279][T10007] RDX: 00000000fffffefa RSI: 0000000020000140 RDI: 0000000000000006 [ 324.275260][T10007] RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000 [ 324.283238][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 324.291217][T10007] R13: 00007ffd959176af R14: 00007f2cee4579c0 R15: 000000000118bfd4 [ 324.330164][ T12] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 324.469609][ T12] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.483654][ T12] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 324.502403][ T12] usb 3-1: Manufacturer: syz [ 324.509811][ T12] usb 3-1: SerialNumber: syz [ 324.993147][ T8153] usb 3-1: USB disconnect, device number 5 19:01:18 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="13011003000000102505a8a440000100030109022c00010106"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, 0x0) 19:01:18 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102440, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) 19:01:18 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) 19:01:18 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) 19:01:18 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) 19:01:18 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) 19:01:18 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) 19:01:18 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) [ 325.712574][ T7] device hsr_slave_0 left promiscuous mode [ 325.721936][ T7] device hsr_slave_1 left promiscuous mode [ 325.731329][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.747810][ T7] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.769527][ T7] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.783983][ T7] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.792898][ T7] device bridge_slave_1 left promiscuous mode [ 325.802851][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.811764][ T7] device bridge_slave_0 left promiscuous mode [ 325.820682][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.833122][ T7] device veth1_macvtap left promiscuous mode [ 325.839937][ T7] device veth0_macvtap left promiscuous mode [ 325.846015][ T7] device veth1_vlan left promiscuous mode [ 325.853888][ T7] device veth0_vlan left promiscuous mode [ 325.876744][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 326.129039][ T23] usb 3-1: Using ep0 maxpacket: 16