Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2020/05/24 20:53:57 fuzzer started 2020/05/24 20:53:57 dialing manager at 10.128.0.26:41143 2020/05/24 20:53:58 syscalls: 3055 2020/05/24 20:53:58 code coverage: enabled 2020/05/24 20:53:58 comparison tracing: enabled 2020/05/24 20:53:58 extra coverage: enabled 2020/05/24 20:53:58 setuid sandbox: enabled 2020/05/24 20:53:58 namespace sandbox: enabled 2020/05/24 20:53:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/24 20:53:58 fault injection: enabled 2020/05/24 20:53:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/24 20:53:58 net packet injection: enabled 2020/05/24 20:53:58 net device setup: enabled 2020/05/24 20:53:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/24 20:53:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/24 20:53:58 USB emulation: enabled 20:56:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x5) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) open(&(0x7f00000001c0)='./file0\x00', 0x1100000441c2, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00080001"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x4040) syzkaller login: [ 181.393769][ T6827] IPVS: ftp: loaded support on port[0] = 21 20:56:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 181.540285][ T6827] chnl_net:caif_netlink_parms(): no params data found [ 181.658586][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.675430][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.695378][ T6827] device bridge_slave_0 entered promiscuous mode [ 181.707162][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.733947][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.741818][ T6827] device bridge_slave_1 entered promiscuous mode [ 181.778037][ T6957] IPVS: ftp: loaded support on port[0] = 21 [ 181.804052][ T6827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.839118][ T6827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.899547][ T6827] team0: Port device team_slave_0 added [ 181.916274][ T6827] team0: Port device team_slave_1 added 20:56:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) [ 181.961730][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.983397][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.014820][ T6827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.049091][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.063655][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.123527][ T6827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.257091][ T6827] device hsr_slave_0 entered promiscuous mode 20:56:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) [ 182.305240][ T6827] device hsr_slave_1 entered promiscuous mode [ 182.398106][ T7084] IPVS: ftp: loaded support on port[0] = 21 [ 182.404141][ T6957] chnl_net:caif_netlink_parms(): no params data found 20:56:01 executing program 4: socketpair(0x2c, 0x3, 0x1, &(0x7f0000000740)) [ 182.685008][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.692151][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.703820][ T6957] device bridge_slave_0 entered promiscuous mode [ 182.722222][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.729830][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.748736][ T6957] device bridge_slave_1 entered promiscuous mode [ 182.790542][ T7151] IPVS: ftp: loaded support on port[0] = 21 [ 182.878257][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.954671][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 20:56:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) [ 183.037455][ T7084] chnl_net:caif_netlink_parms(): no params data found [ 183.057160][ T6827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.171611][ T6827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.183687][ T7267] IPVS: ftp: loaded support on port[0] = 21 [ 183.238599][ T6827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.277271][ T6957] team0: Port device team_slave_0 added [ 183.283249][ T6827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.371429][ T6957] team0: Port device team_slave_1 added [ 183.397771][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.405764][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.432351][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.478356][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.481058][ T7305] IPVS: ftp: loaded support on port[0] = 21 [ 183.486452][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.518088][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.560329][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.569275][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.577799][ T7084] device bridge_slave_0 entered promiscuous mode [ 183.616295][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.625699][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.633861][ T7084] device bridge_slave_1 entered promiscuous mode [ 183.687455][ T6957] device hsr_slave_0 entered promiscuous mode [ 183.744077][ T6957] device hsr_slave_1 entered promiscuous mode [ 183.803483][ T6957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.811375][ T6957] Cannot create hsr debugfs directory [ 183.904039][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.933700][ T7151] chnl_net:caif_netlink_parms(): no params data found [ 183.974289][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.047925][ T7084] team0: Port device team_slave_0 added [ 184.120562][ T7084] team0: Port device team_slave_1 added [ 184.152903][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.160251][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.187840][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.251158][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.261510][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.289269][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.356432][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 184.384715][ T6827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.471219][ T6827] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.488493][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 184.499467][ T6957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.551784][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.560890][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.616035][ T7084] device hsr_slave_0 entered promiscuous mode [ 184.643973][ T7084] device hsr_slave_1 entered promiscuous mode [ 184.704929][ T7084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.712489][ T7084] Cannot create hsr debugfs directory [ 184.723059][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.733180][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.741616][ T7151] device bridge_slave_0 entered promiscuous mode [ 184.755357][ T6957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.809543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.821898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.831707][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.839089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.847333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.856594][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.865117][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.872199][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.880236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.889285][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.898184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.907030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.939154][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.947925][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.956529][ T7151] device bridge_slave_1 entered promiscuous mode [ 184.970098][ T6957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.052737][ T6957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.096962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.105495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.171436][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.184560][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.192918][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.203884][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.220281][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.239401][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.246897][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.256210][ T7267] device bridge_slave_0 entered promiscuous mode [ 185.268630][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.281628][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.290236][ T7267] device bridge_slave_1 entered promiscuous mode [ 185.298134][ T6827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.309748][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.318094][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.328092][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.338520][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.380273][ T7151] team0: Port device team_slave_0 added [ 185.425905][ T7151] team0: Port device team_slave_1 added [ 185.443570][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.478354][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.524403][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.531380][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.558726][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.577729][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.585733][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.595123][ T7305] device bridge_slave_0 entered promiscuous mode [ 185.617270][ T7267] team0: Port device team_slave_0 added [ 185.627357][ T7267] team0: Port device team_slave_1 added [ 185.640959][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.648054][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.675372][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.698202][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.713918][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.722882][ T7305] device bridge_slave_1 entered promiscuous mode [ 185.763796][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.770760][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.798107][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.813461][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.820425][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.846611][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.865052][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.955704][ T7151] device hsr_slave_0 entered promiscuous mode [ 186.013639][ T7151] device hsr_slave_1 entered promiscuous mode [ 186.063374][ T7151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.070974][ T7151] Cannot create hsr debugfs directory [ 186.081369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.089199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.107218][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.160338][ T6827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.237649][ T7267] device hsr_slave_0 entered promiscuous mode [ 186.284082][ T7267] device hsr_slave_1 entered promiscuous mode [ 186.323408][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.331018][ T7267] Cannot create hsr debugfs directory [ 186.340562][ T7305] team0: Port device team_slave_0 added [ 186.374355][ T7305] team0: Port device team_slave_1 added [ 186.412562][ T7084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.466104][ T7084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.517615][ T7084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.571397][ T7084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.644598][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.651561][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.681668][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.695192][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.702131][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.729467][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.816661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.826079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.856062][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.902997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.911101][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.920314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.930066][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.989285][ T7305] device hsr_slave_0 entered promiscuous mode [ 187.043727][ T7305] device hsr_slave_1 entered promiscuous mode [ 187.084309][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.091899][ T7305] Cannot create hsr debugfs directory [ 187.107058][ T6827] device veth0_vlan entered promiscuous mode [ 187.132069][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.145559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.153884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.232973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.242477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.251970][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.259076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.286710][ T6827] device veth1_vlan entered promiscuous mode [ 187.296468][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.305867][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.316397][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.331395][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.338696][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.364196][ T7151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.405687][ T7151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 187.447618][ T7151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 187.518089][ T7151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.584642][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.598470][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.650954][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.660219][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.669638][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.679249][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.689895][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.738867][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.747628][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.759263][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.769370][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.785241][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.793022][ T7267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.845722][ T7267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.896909][ T7267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.960827][ T7267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.025558][ T6827] device veth0_macvtap entered promiscuous mode [ 188.056648][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.066554][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.092338][ T6827] device veth1_macvtap entered promiscuous mode [ 188.111043][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.119745][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.181654][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.190520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.198905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.210313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.219245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.254890][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.279172][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.312882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.331445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.358318][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.419765][ T7305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.609718][ T7084] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.617503][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.626999][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.635510][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.645244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.654801][ T7305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.697722][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.756800][ T7305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.815377][ T7305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.855021][ T8081] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.896648][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.913058][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.929398][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.933119][ C1] hrtimer: interrupt took 48298 ns [ 188.936608][ T2647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.962743][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.983638][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.992419][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.037834][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.045021][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.058677][ T29] audit: type=1800 audit(1590353768.312:2): pid=8086 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15738 res=0 [ 189.083744][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.088415][ T8086] ceph: Bad value for 'source' [ 189.100637][ T6957] device veth0_vlan entered promiscuous mode [ 189.168401][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.180985][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.199250][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.208730][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.219457][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.228044][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.236510][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.247243][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.256864][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 20:56:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x5) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) open(&(0x7f00000001c0)='./file0\x00', 0x1100000441c2, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00080001"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x4040) [ 189.264979][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.272650][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.374064][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.382903][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.397368][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.415718][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.432477][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.454339][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.462868][ T3174] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.470032][ T3174] bridge0: port 1(bridge_slave_0) entered forwarding state 20:56:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x5) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) open(&(0x7f00000001c0)='./file0\x00', 0x1100000441c2, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00080001"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x4040) [ 189.486723][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.499064][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.512423][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.519591][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state 20:56:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003240), 0x492492492492619, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x5) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) open(&(0x7f00000001c0)='./file0\x00', 0x1100000441c2, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00080001"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x4040) [ 189.537111][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.555188][ T6957] device veth1_vlan entered promiscuous mode [ 189.574029][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.650166][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.660455][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.672214][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.681582][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:56:08 executing program 0: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0x0, 0x0) [ 189.698533][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.711377][ T3174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.727198][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:56:09 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x4a001) ioctl$USBDEVFS_IOCTL(r0, 0xc0185500, &(0x7f0000000000)=@usbdevfs_disconnect={0xa1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)) semop(r2, &(0x7f0000000300)=[{}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) [ 189.806591][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.824577][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.832510][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.849713][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.860135][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.870015][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.890734][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.897317][ T8106] usb usb9: usbfs: process 8106 (syz-executor.0) did not claim interface 22 before use [ 189.899660][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.921292][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.946342][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.966389][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.982386][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.020934][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.030233][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.038794][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.048910][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.057968][ T2647] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.065133][ T2647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.072836][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.081882][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.090757][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.097915][ T2647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.107914][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.122347][ T6957] device veth0_macvtap entered promiscuous mode [ 190.135900][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.148780][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.158752][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.176622][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.184998][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.199544][ T6957] device veth1_macvtap entered promiscuous mode [ 190.213647][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.221860][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.229795][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.249237][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.259300][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.272101][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.280194][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.313421][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.326927][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.335790][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.345131][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.353999][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.361041][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.368827][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.377751][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.386528][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.393688][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.404958][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.435426][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.443683][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.451609][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.460915][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.469795][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.480333][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.494253][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.502684][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.514155][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.528009][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.539768][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.562407][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.571770][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.581542][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.591857][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.600892][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.610346][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.623477][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.634500][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.652079][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.664291][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 20:56:09 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) [ 190.696697][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.712402][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.754032][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.762863][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.867835][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.887875][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.907395][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.926109][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.952547][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.990237][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.024156][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.062196][ T7084] device veth0_vlan entered promiscuous mode [ 191.099029][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 20:56:10 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) [ 191.185939][ T7151] device veth0_vlan entered promiscuous mode [ 191.209243][ T7305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.243627][ T7305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.271977][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.303950][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.311918][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.335155][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.369477][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.379453][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.396082][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.425252][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.441769][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.466702][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.476773][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.485265][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.493837][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.572738][ T7151] device veth1_vlan entered promiscuous mode [ 191.629456][ T7084] device veth1_vlan entered promiscuous mode 20:56:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 191.766113][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.786107][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.825464][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.854481][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.870933][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.879857][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.910289][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.934626][ T7151] device veth0_macvtap entered promiscuous mode [ 191.960561][ T7084] device veth0_macvtap entered promiscuous mode [ 191.990966][ T7084] device veth1_macvtap entered promiscuous mode [ 192.012318][ T7151] device veth1_macvtap entered promiscuous mode [ 192.033587][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.041787][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.051224][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.060569][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.068858][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.079872][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.080250][ T0] NOHZ: local_softirq_pending 08 [ 192.119750][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.137277][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.148038][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.159351][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.170977][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.189478][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.199746][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.210692][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.221694][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.231962][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.244320][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.256605][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.267569][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.282341][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.293409][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.308474][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.318713][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.331585][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.343344][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.364285][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.377401][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.386915][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.400034][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.417297][ T7267] device veth0_vlan entered promiscuous mode [ 192.430979][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.440545][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.450637][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.460221][ T2500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.482144][ T7267] device veth1_vlan entered promiscuous mode [ 192.493440][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.501482][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.511378][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.521906][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.533153][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.544357][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.556227][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.566226][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.576728][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.589264][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.723830][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.732090][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.742365][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.840716][ T7305] device veth0_vlan entered promiscuous mode [ 192.856766][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.872500][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.905660][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.933575][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 20:56:12 executing program 2: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, r1, 0x0, 0x0) [ 192.950116][ T7305] device veth1_vlan entered promiscuous mode [ 193.080112][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.088510][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.098769][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.108887][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.122709][ T7267] device veth0_macvtap entered promiscuous mode [ 193.200539][ T7267] device veth1_macvtap entered promiscuous mode [ 193.234149][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.242276][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.255175][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.270080][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.297026][ T7305] device veth0_macvtap entered promiscuous mode [ 193.328410][ T7305] device veth1_macvtap entered promiscuous mode [ 193.352934][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.373543][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.405877][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.421013][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.431852][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.443422][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.453996][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.464482][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.476533][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.493281][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.501352][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.509976][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.520809][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.537251][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.550217][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.560982][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.572009][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.582345][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.593459][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.605889][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.617002][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.628505][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.649408][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.660965][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.671480][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.683462][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.693355][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.703944][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.714066][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.724626][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.734518][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.745177][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 20:56:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0) [ 193.757709][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.766577][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.779963][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.792447][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.823986][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.844842][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.863267][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.888528][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.899578][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.909923][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.922415][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.943469][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.961356][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.972006][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 193.988152][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.001575][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.036584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.048029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:56:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) [ 194.341021][ T8168] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 194.355075][ T8169] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING 20:56:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:13 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 20:56:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200"/32], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:13 executing program 4: keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x1}) 20:56:13 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='$\xbbeth0nodev*\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') 20:56:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:14 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) 20:56:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 20:56:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d0000140000000080000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000080002105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a"], 0xa0}}, 0x0) 20:56:14 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:14 executing program 4: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x15, r0, 0x0, 0x0, 0x0) 20:56:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 20:56:14 executing program 3: 20:56:14 executing program 4: 20:56:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 195.142552][ T8220] fuse: Bad value for 'fd' 20:56:14 executing program 5: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:14 executing program 2: 20:56:14 executing program 3: 20:56:14 executing program 4: 20:56:14 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:14 executing program 5: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:14 executing program 2: 20:56:14 executing program 3: 20:56:14 executing program 4: 20:56:14 executing program 4: 20:56:14 executing program 3: 20:56:14 executing program 2: 20:56:14 executing program 5: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:14 executing program 4: 20:56:15 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:15 executing program 2: 20:56:15 executing program 3: 20:56:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:15 executing program 4: 20:56:15 executing program 2: 20:56:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:15 executing program 3: 20:56:15 executing program 4: 20:56:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:15 executing program 2: 20:56:15 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:15 executing program 3: 20:56:15 executing program 4: 20:56:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)) 20:56:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:15 executing program 2: 20:56:15 executing program 4: 20:56:15 executing program 3: 20:56:15 executing program 2: 20:56:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:15 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:15 executing program 4: 20:56:16 executing program 2: 20:56:16 executing program 3: 20:56:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:16 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:16 executing program 4: 20:56:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 4: 20:56:16 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)) 20:56:16 executing program 3: 20:56:16 executing program 2: 20:56:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 20:56:16 executing program 4: 20:56:16 executing program 3: 20:56:16 executing program 2: 20:56:16 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 4: 20:56:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 20:56:16 executing program 3: 20:56:16 executing program 2: 20:56:16 executing program 3: 20:56:16 executing program 4: 20:56:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) 20:56:16 executing program 2: 20:56:16 executing program 3: 20:56:16 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:16 executing program 4: 20:56:16 executing program 5: 20:56:16 executing program 2: 20:56:16 executing program 3: 20:56:17 executing program 4: 20:56:17 executing program 3: 20:56:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x104}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) 20:56:17 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="110700000000000000000600"], 0x14}}, 0x0) 20:56:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:17 executing program 4: 20:56:17 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:17 executing program 3: 20:56:17 executing program 2: 20:56:17 executing program 5: 20:56:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:17 executing program 4: 20:56:17 executing program 4: 20:56:17 executing program 3: 20:56:17 executing program 5: 20:56:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:17 executing program 2: 20:56:17 executing program 4: 20:56:17 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @local, r4}, 0xc) 20:56:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 20:56:17 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 20:56:17 executing program 3: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fsync(r0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000700)=0x80001) 20:56:17 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x59) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x1000}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1101, 0x2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @enter_looper, @acquire, @increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/36, 0x24, 0x2, 0x1b}, @fda={0x66646185, 0x9, 0x2, 0xd}, @flat=@weak_handle={0x77682a85, 0x1001, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x400}], 0xe7, 0x0, &(0x7f0000000300)="66590fab5559ac20cce723133e5ed97ac219a697719bbf71065488d922251da01ab87ff09a7d957cc1931a4ec2d41f86dd5f78db92263abb9b0aec4186e29b9638c499d7153530e33dafa2ae538ba5947df730b61c41a79271a547efbad1fe39671247c1b896953adf2b1b63bdfd756d5b7bb4d0b1f2d4f5b4f6039937ad45dd22768d2334a042fd8aee0ed3fcdc8d0eec39574e296bfa90b2d3d3f6814c864515ab91057587ae9d4cabd0868386310137508d88ee7bf3d625248b07efbedb643afffd8329603759eadf8ce2153eface2909be558653d4a812d1e774a07ad4d75395ee8b6ebf07"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0xaa42, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000480)={{0x1f, 0x9}, 'port1\x00', 0x8, 0x2, 0x6, 0x4, 0x7, 0x9, 0x7fff, 0x0, 0x0, 0x50}) nanosleep(&(0x7f0000000540), &(0x7f0000000580)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x80000, 0x0) lseek(r4, 0x101, 0x4) lseek(0xffffffffffffffff, 0x3ff, 0x1) ioctl$FITHAW(r1, 0xc0045878) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcf16}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004f40)='net/dev\x00') sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000005040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x10, 0x3f8, 0x800, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000050c0)='./file0\x00', &(0x7f0000005100), 0x800) 20:56:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:18 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x8010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r1) 20:56:18 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x4014) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 20:56:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 20:56:18 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000002880)='vfat\x00', &(0x7f00000028c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000009b80)={[{@fat=@discard='discard'}]}) [ 199.307520][ T8424] FAT-fs (loop3): bogus number of reserved sectors [ 199.343280][ T8424] FAT-fs (loop3): Can't find a valid FAT filesystem 20:56:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x200001, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 20:56:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:18 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:18 executing program 5: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="3100000012000900690006342fc56aef40c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) 20:56:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) [ 199.676211][ T8437] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 199.731093][ T8448] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 20:56:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 20:56:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000002880)='vfat\x00', &(0x7f00000028c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@utf8no='utf8=0'}]}) 20:56:19 executing program 3: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fsync(r0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000700)=0x80001) [ 200.016652][ T8455] FAT-fs (loop4): bogus number of reserved sectors [ 200.030372][ T8455] FAT-fs (loop4): Can't find a valid FAT filesystem 20:56:19 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800000020005c503, 0x800007e}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 20:56:19 executing program 5: mknod(0x0, 0x0, 0x0) setuid(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000001340)="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", 0x337}], 0x1) creat(0x0, 0x20) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/197) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:56:19 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2c00000003000000000000008100000004000200000000000000000000000000000000000000000000000000203b9d5a053786ed0fe77cb48e324d9e4fc9"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 20:56:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {0x0, 0xfffc}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 20:56:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) [ 200.326016][ T8472] input: syz1 as /devices/virtual/input/input5 [ 200.334529][ T8472] ================================================================== [ 200.334598][ T8472] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 200.334611][ T8472] Read of size 8 at addr ffff88808f553158 by task syz-executor.4/8472 [ 200.334615][ T8472] [ 200.334631][ T8472] CPU: 0 PID: 8472 Comm: syz-executor.4 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 200.334640][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.334645][ T8472] Call Trace: [ 200.334665][ T8472] dump_stack+0x18f/0x20d [ 200.334688][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.334702][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.334723][ T8472] print_address_description.constprop.0.cold+0xd3/0x413 [ 200.334739][ T8472] ? cdev_device_del+0x69/0x80 [ 200.334755][ T8472] ? evdev_disconnect+0x3d/0xb0 [ 200.334772][ T8472] ? __input_unregister_device+0x1b0/0x430 [ 200.334787][ T8472] ? input_unregister_device+0xb4/0xf0 [ 200.334802][ T8472] ? uinput_destroy_device+0x1e2/0x240 [ 200.334818][ T8472] ? vprintk_func+0x97/0x1a6 [ 200.334836][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.334850][ T8472] kasan_report.cold+0x1f/0x37 [ 200.334866][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.334881][ T8472] __mutex_lock+0x1033/0x13c0 [ 200.334897][ T8472] ? evdev_cleanup+0x21/0x190 [ 200.334910][ T8472] ? print_usage_bug+0x240/0x240 [ 200.334927][ T8472] ? trace_hardirqs_off+0x50/0x220 [ 200.334940][ T8472] ? mutex_trylock+0x2c0/0x2c0 [ 200.334955][ T8472] ? mark_held_locks+0x9f/0xe0 [ 200.334970][ T8472] ? kfree+0x1eb/0x2b0 [ 200.334984][ T8472] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 200.335003][ T8472] ? kfree_const+0x51/0x60 [ 200.335025][ T8472] ? evdev_cleanup+0x21/0x190 [ 200.335038][ T8472] evdev_cleanup+0x21/0x190 [ 200.335054][ T8472] evdev_disconnect+0x45/0xb0 [ 200.335071][ T8472] __input_unregister_device+0x1b0/0x430 [ 200.335088][ T8472] input_unregister_device+0xb4/0xf0 [ 200.335103][ T8472] uinput_destroy_device+0x1e2/0x240 [ 200.335126][ T8472] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 200.335142][ T8472] ? uinput_read+0xd10/0xd10 [ 200.335158][ T8472] ? ioctl_file_clone+0x180/0x180 [ 200.335174][ T8472] ? __fget_files+0x32f/0x500 [ 200.335191][ T8472] ? do_dup2+0x520/0x520 [ 200.335205][ T8472] ? __x64_sys_futex+0x380/0x4f0 [ 200.335227][ T8472] ? uinput_compat_ioctl+0xa0/0xa0 [ 200.335242][ T8472] ksys_ioctl+0x11a/0x180 [ 200.335260][ T8472] __x64_sys_ioctl+0x6f/0xb0 [ 200.335275][ T8472] do_syscall_64+0xf6/0x7d0 [ 200.335295][ T8472] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 200.335305][ T8472] RIP: 0033:0x45ca29 [ 200.335320][ T8472] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.335329][ T8472] RSP: 002b:00007f096ba72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.335343][ T8472] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 200.335351][ T8472] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 200.335359][ T8472] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 200.335367][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 200.335376][ T8472] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f096ba736d4 [ 200.335397][ T8472] [ 200.335405][ T8472] Allocated by task 8472: [ 200.335419][ T8472] save_stack+0x1b/0x40 [ 200.335433][ T8472] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 200.335445][ T8472] kmem_cache_alloc_trace+0x153/0x7d0 [ 200.335458][ T8472] evdev_connect+0x80/0x4d0 [ 200.335471][ T8472] input_attach_handler+0x194/0x200 [ 200.335483][ T8472] input_register_device.cold+0xf5/0x246 [ 200.335497][ T8472] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 200.335509][ T8472] ksys_ioctl+0x11a/0x180 [ 200.335523][ T8472] __x64_sys_ioctl+0x6f/0xb0 [ 200.335535][ T8472] do_syscall_64+0xf6/0x7d0 [ 200.335548][ T8472] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 200.335552][ T8472] [ 200.335559][ T8472] Freed by task 8472: [ 200.335571][ T8472] save_stack+0x1b/0x40 [ 200.335583][ T8472] __kasan_slab_free+0xf7/0x140 [ 200.335594][ T8472] kfree+0x109/0x2b0 [ 200.335606][ T8472] device_release+0x71/0x200 [ 200.335619][ T8472] kobject_put+0x1c8/0x2f0 [ 200.335631][ T8472] cdev_device_del+0x69/0x80 [ 200.335643][ T8472] evdev_disconnect+0x3d/0xb0 [ 200.335657][ T8472] __input_unregister_device+0x1b0/0x430 [ 200.335671][ T8472] input_unregister_device+0xb4/0xf0 [ 200.335694][ T8472] uinput_destroy_device+0x1e2/0x240 [ 200.335708][ T8472] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 200.335722][ T8472] ksys_ioctl+0x11a/0x180 [ 200.335735][ T8472] __x64_sys_ioctl+0x6f/0xb0 [ 200.335749][ T8472] do_syscall_64+0xf6/0x7d0 [ 200.335762][ T8472] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 200.335766][ T8472] [ 200.335775][ T8472] The buggy address belongs to the object at ffff88808f553000 [ 200.335775][ T8472] which belongs to the cache kmalloc-2k of size 2048 [ 200.335787][ T8472] The buggy address is located 344 bytes inside of [ 200.335787][ T8472] 2048-byte region [ffff88808f553000, ffff88808f553800) [ 200.335792][ T8472] The buggy address belongs to the page: [ 200.335806][ T8472] page:ffffea00023d54c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 200.335816][ T8472] flags: 0xfffe0000000200(slab) [ 200.335835][ T8472] raw: 00fffe0000000200 ffffea00025ee608 ffffea00025c4488 ffff8880aa000e00 [ 200.335852][ T8472] raw: 0000000000000000 ffff88808f553000 0000000100000001 0000000000000000 [ 200.335859][ T8472] page dumped because: kasan: bad access detected [ 200.335863][ T8472] [ 200.335868][ T8472] Memory state around the buggy address: [ 200.335880][ T8472] ffff88808f553000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.335891][ T8472] ffff88808f553080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.335901][ T8472] >ffff88808f553100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.335907][ T8472] ^ [ 200.335919][ T8472] ffff88808f553180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.335930][ T8472] ffff88808f553200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.335936][ T8472] ================================================================== [ 200.335941][ T8472] Disabling lock debugging due to kernel taint [ 200.335948][ T8472] Kernel panic - not syncing: panic_on_warn set ... [ 200.335963][ T8472] CPU: 0 PID: 8472 Comm: syz-executor.4 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 200.335971][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.335974][ T8472] Call Trace: [ 200.335990][ T8472] dump_stack+0x18f/0x20d [ 200.336003][ T8472] ? __mutex_lock+0xf50/0x13c0 [ 200.336018][ T8472] panic+0x2e3/0x75c [ 200.336032][ T8472] ? __warn_printk+0xf3/0xf3 [ 200.336050][ T8472] ? trace_hardirqs_on+0x55/0x230 [ 200.336063][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.336074][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.336088][ T8472] end_report+0x4d/0x53 [ 200.336101][ T8472] kasan_report.cold+0xd/0x37 [ 200.336114][ T8472] ? __mutex_lock+0x1033/0x13c0 [ 200.336126][ T8472] __mutex_lock+0x1033/0x13c0 [ 200.336140][ T8472] ? evdev_cleanup+0x21/0x190 [ 200.336153][ T8472] ? print_usage_bug+0x240/0x240 [ 200.336167][ T8472] ? trace_hardirqs_off+0x50/0x220 [ 200.336178][ T8472] ? mutex_trylock+0x2c0/0x2c0 [ 200.336193][ T8472] ? mark_held_locks+0x9f/0xe0 [ 200.336205][ T8472] ? kfree+0x1eb/0x2b0 [ 200.336219][ T8472] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 200.336234][ T8472] ? kfree_const+0x51/0x60 [ 200.336250][ T8472] ? evdev_cleanup+0x21/0x190 [ 200.336261][ T8472] evdev_cleanup+0x21/0x190 [ 200.336275][ T8472] evdev_disconnect+0x45/0xb0 [ 200.336290][ T8472] __input_unregister_device+0x1b0/0x430 [ 200.336311][ T8472] input_unregister_device+0xb4/0xf0 [ 200.336327][ T8472] uinput_destroy_device+0x1e2/0x240 [ 200.336345][ T8472] uinput_ioctl_handler.isra.0+0x148/0x1d80 [ 200.336360][ T8472] ? uinput_read+0xd10/0xd10 [ 200.336375][ T8472] ? ioctl_file_clone+0x180/0x180 [ 200.336388][ T8472] ? __fget_files+0x32f/0x500 [ 200.336402][ T8472] ? do_dup2+0x520/0x520 [ 200.336415][ T8472] ? __x64_sys_futex+0x380/0x4f0 [ 200.336432][ T8472] ? uinput_compat_ioctl+0xa0/0xa0 [ 200.336445][ T8472] ksys_ioctl+0x11a/0x180 [ 200.336460][ T8472] __x64_sys_ioctl+0x6f/0xb0 [ 200.336474][ T8472] do_syscall_64+0xf6/0x7d0 [ 200.336489][ T8472] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 200.336498][ T8472] RIP: 0033:0x45ca29 [ 200.336511][ T8472] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.336518][ T8472] RSP: 002b:00007f096ba72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.336529][ T8472] RAX: ffffffffffffffda RBX: 00000000004eff40 RCX: 000000000045ca29 [ 200.336537][ T8472] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 200.336544][ T8472] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 200.336551][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 200.336558][ T8472] R13: 00000000000005c4 R14: 00000000004c8855 R15: 00007f096ba736d4 [ 200.338021][ T8472] Kernel Offset: disabled [ 201.218445][ T8472] Rebooting in 86400 seconds..