[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.200' (ECDSA) to the list of known hosts. 2020/09/03 13:44:01 fuzzer started 2020/09/03 13:44:01 dialing manager at 10.128.0.26:42715 2020/09/03 13:44:01 syscalls: 3331 2020/09/03 13:44:01 code coverage: enabled 2020/09/03 13:44:01 comparison tracing: enabled 2020/09/03 13:44:01 extra coverage: enabled 2020/09/03 13:44:01 setuid sandbox: enabled 2020/09/03 13:44:01 namespace sandbox: enabled 2020/09/03 13:44:01 Android sandbox: enabled 2020/09/03 13:44:01 fault injection: enabled 2020/09/03 13:44:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/03 13:44:01 net packet injection: enabled 2020/09/03 13:44:01 net device setup: enabled 2020/09/03 13:44:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/03 13:44:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/03 13:44:01 USB emulation: enabled 2020/09/03 13:44:01 hci packet injection: enabled 13:47:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) creat(0x0, 0x0) syzkaller login: [ 292.665904][ T28] audit: type=1400 audit(1599140858.048:8): avc: denied { execmem } for pid=6886 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:47:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x24}}, 0x0) 13:47:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x15, 0xffffffffffffffff, 0x3) 13:47:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x9b) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/232) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000003c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) 13:47:38 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x40, 0x0) 13:47:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff03000000000000", 0x1e5) [ 293.927000][ T6887] IPVS: ftp: loaded support on port[0] = 21 [ 294.113229][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 294.218874][ T6889] IPVS: ftp: loaded support on port[0] = 21 [ 294.268611][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.279015][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.288343][ T6887] device bridge_slave_0 entered promiscuous mode [ 294.299849][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.330267][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.338610][ T6887] device bridge_slave_1 entered promiscuous mode [ 294.423920][ T6891] IPVS: ftp: loaded support on port[0] = 21 [ 294.484020][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.570929][ T6893] IPVS: ftp: loaded support on port[0] = 21 [ 294.571271][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.784850][ T6887] team0: Port device team_slave_0 added [ 294.823357][ T6887] team0: Port device team_slave_1 added [ 294.823737][ T6895] IPVS: ftp: loaded support on port[0] = 21 [ 294.869462][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 295.019757][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.028470][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.058048][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.097714][ T6897] IPVS: ftp: loaded support on port[0] = 21 [ 295.117262][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.131420][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.160274][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.324530][ T6887] device hsr_slave_0 entered promiscuous mode [ 295.334490][ T6887] device hsr_slave_1 entered promiscuous mode [ 295.385540][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.395512][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.404619][ T6889] device bridge_slave_0 entered promiscuous mode [ 295.438217][ T6891] chnl_net:caif_netlink_parms(): no params data found [ 295.476495][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.485745][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.494249][ T6889] device bridge_slave_1 entered promiscuous mode [ 295.537079][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 295.680301][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.733230][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.834903][ T6889] team0: Port device team_slave_0 added [ 295.844275][ T6895] chnl_net:caif_netlink_parms(): no params data found [ 295.878982][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.886222][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.895142][ T6891] device bridge_slave_0 entered promiscuous mode [ 295.912247][ T6889] team0: Port device team_slave_1 added [ 295.914573][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 295.929736][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.943804][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.953388][ T6891] device bridge_slave_1 entered promiscuous mode [ 295.964999][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.973911][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.985896][ T6893] device bridge_slave_0 entered promiscuous mode [ 295.996653][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.003915][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.012268][ T6893] device bridge_slave_1 entered promiscuous mode [ 296.102087][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.109092][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.137293][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.178015][ T6891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.208820][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.216797][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.230087][ T3950] Bluetooth: hci1: command 0x0409 tx timeout [ 296.256779][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.282834][ T6891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.294601][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.310011][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 296.348665][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.367412][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.378763][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.389042][ T6895] device bridge_slave_0 entered promiscuous mode [ 296.397856][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 296.416614][ T6887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.446821][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.455302][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.464377][ T6895] device bridge_slave_1 entered promiscuous mode [ 296.499631][ T6889] device hsr_slave_0 entered promiscuous mode [ 296.508266][ T6889] device hsr_slave_1 entered promiscuous mode [ 296.517111][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.526169][ T6889] Cannot create hsr debugfs directory [ 296.545796][ T6887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.552907][ T2625] Bluetooth: hci3: command 0x0409 tx timeout [ 296.564971][ T6891] team0: Port device team_slave_0 added [ 296.588600][ T6893] team0: Port device team_slave_0 added [ 296.605876][ T6893] team0: Port device team_slave_1 added [ 296.616866][ T6887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.631297][ T6891] team0: Port device team_slave_1 added [ 296.638892][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.667889][ T6887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.702568][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.768331][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.775776][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.789987][ T3950] Bluetooth: hci4: command 0x0409 tx timeout [ 296.807726][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.822416][ T6895] team0: Port device team_slave_0 added [ 296.828923][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.837413][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.864954][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.879109][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.886934][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.914461][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.937627][ T6895] team0: Port device team_slave_1 added [ 296.950694][ T3950] Bluetooth: hci5: command 0x0409 tx timeout [ 296.982701][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.989671][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.017302][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.041299][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.048274][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.075891][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.121144][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.128116][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.157403][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.180765][ T6893] device hsr_slave_0 entered promiscuous mode [ 297.193031][ T6893] device hsr_slave_1 entered promiscuous mode [ 297.200930][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.208508][ T6893] Cannot create hsr debugfs directory [ 297.230517][ T6891] device hsr_slave_0 entered promiscuous mode [ 297.239487][ T6891] device hsr_slave_1 entered promiscuous mode [ 297.246618][ T6891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.254428][ T6891] Cannot create hsr debugfs directory [ 297.260362][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.267419][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.276723][ T6897] device bridge_slave_0 entered promiscuous mode [ 297.323754][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.331559][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.341220][ T6897] device bridge_slave_1 entered promiscuous mode [ 297.465443][ T6895] device hsr_slave_0 entered promiscuous mode [ 297.482119][ T6895] device hsr_slave_1 entered promiscuous mode [ 297.488871][ T6895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.498264][ T6895] Cannot create hsr debugfs directory [ 297.534353][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.582231][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.674610][ T6897] team0: Port device team_slave_0 added [ 297.684061][ T6897] team0: Port device team_slave_1 added [ 297.729607][ T6889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.761645][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.768752][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.798251][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.824235][ T6889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.859091][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.871712][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.900568][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.929356][ T6889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.962487][ T6897] device hsr_slave_0 entered promiscuous mode [ 297.972361][ T6897] device hsr_slave_1 entered promiscuous mode [ 297.980625][ T6897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.988182][ T6897] Cannot create hsr debugfs directory [ 297.994453][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 298.024939][ T6889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.143275][ T6893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.154978][ T6893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.193920][ T6893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.212210][ T6893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.258011][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.311272][ T3950] Bluetooth: hci1: command 0x041b tx timeout [ 298.339236][ T6891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.388438][ T6891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.396346][ T3950] Bluetooth: hci2: command 0x041b tx timeout [ 298.444556][ T6891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.457087][ T6895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.469196][ T6895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.494347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.511638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.527400][ T6891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.559704][ T6895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.577706][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.610199][ T6895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.631273][ T3203] Bluetooth: hci3: command 0x041b tx timeout [ 298.652020][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.665677][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.675090][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.682435][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.693043][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.737570][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.747841][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.757284][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.764549][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.773373][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.782908][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.798232][ T6897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.836952][ T6897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.848184][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.858613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.873136][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.881278][ T3203] Bluetooth: hci4: command 0x041b tx timeout [ 298.913119][ T6897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.922524][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.939066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.948681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.958714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.967988][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.987482][ T6887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.000741][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.023035][ T6897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.030300][ T3950] Bluetooth: hci5: command 0x041b tx timeout [ 299.041779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.051664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.076128][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.105723][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.136051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.144666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.153375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.162564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.184431][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.205303][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.215914][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.225606][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.232785][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.241671][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.249159][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.287213][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.302112][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.311882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.320779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.329125][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.336383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.345144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.358386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.367317][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.374476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.382818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.391765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.400394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.407458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.463198][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.472531][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.482420][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.493137][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.503145][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.520822][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.528075][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.543129][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.600879][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.609387][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.620262][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.629117][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.638233][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.647178][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.656579][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.665808][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.703241][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.719223][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.730632][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.744358][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.755132][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.764237][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.773626][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.782670][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.792012][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.801561][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.810782][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.833642][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.855653][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.865846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.874942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.884116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.893271][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.903277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.910443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.926084][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.960735][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.968795][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.978268][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.991408][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.998617][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.029946][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.038276][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.081809][ T3950] Bluetooth: hci0: command 0x040f tx timeout [ 300.091090][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.102037][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.109186][ T6887] device veth0_vlan entered promiscuous mode [ 300.129752][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.137776][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.160715][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.168550][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.190787][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.246640][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.258833][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.266979][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.275339][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.284845][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.294135][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.304058][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.313300][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.321332][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.328815][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.338089][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.347142][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.354381][ T8190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.362906][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.372276][ T8190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.399833][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 300.413574][ T6887] device veth1_vlan entered promiscuous mode [ 300.431649][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.442582][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.451780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.464361][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.474315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.486291][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.493589][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.502583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.512049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.520921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.528686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.537779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.552905][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.561726][ T17] Bluetooth: hci2: command 0x040f tx timeout [ 300.581641][ T6895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.596543][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.620437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.631587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.640733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.649212][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.656394][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.665276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.675193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.684305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.693907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.703687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.713557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.723497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.732698][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.751717][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 300.758040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.768418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.779138][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.786312][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.832402][ T6891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.843727][ T6891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.870920][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.884749][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.893604][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.907782][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.917107][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.930600][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.946589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.961261][ T7825] Bluetooth: hci4: command 0x040f tx timeout [ 300.971912][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.985723][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.010644][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.024539][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.034676][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.059468][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.069121][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.107276][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.114954][ T8190] Bluetooth: hci5: command 0x040f tx timeout [ 301.133906][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.147535][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.156894][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.166969][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.176487][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.185370][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.197416][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.206014][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.214683][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.223872][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.243215][ T6887] device veth0_macvtap entered promiscuous mode [ 301.252657][ T6893] device veth0_vlan entered promiscuous mode [ 301.287838][ T6893] device veth1_vlan entered promiscuous mode [ 301.322886][ T6887] device veth1_macvtap entered promiscuous mode [ 301.335819][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.348432][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.364427][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.373559][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.386606][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.395704][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.404760][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.431157][ T6889] device veth0_vlan entered promiscuous mode [ 301.449706][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.472842][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.481564][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.490320][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.497931][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.506345][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.517666][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.563079][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.572397][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.598571][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.611524][ T6889] device veth1_vlan entered promiscuous mode [ 301.637679][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.648076][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.657638][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.677962][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.702246][ T6893] device veth0_macvtap entered promiscuous mode [ 301.719463][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.728409][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.739847][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.748729][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.759986][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.768737][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.778321][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.787641][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.805057][ T6887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.818217][ T6887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.827740][ T6887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.837905][ T6887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.855535][ T6893] device veth1_macvtap entered promiscuous mode [ 301.870155][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.878627][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.887960][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.897623][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.960371][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.971048][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.980957][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.991882][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.005494][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.015081][ T6891] device veth0_vlan entered promiscuous mode [ 302.047842][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.057226][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.066752][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.075379][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.084339][ T6895] device veth0_vlan entered promiscuous mode [ 302.123886][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.136779][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.154558][ T6889] device veth0_macvtap entered promiscuous mode [ 302.163393][ T8190] Bluetooth: hci0: command 0x0419 tx timeout [ 302.180576][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 302.196305][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.208581][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.238785][ T6891] device veth1_vlan entered promiscuous mode [ 302.257801][ T6889] device veth1_macvtap entered promiscuous mode [ 302.282367][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.292651][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.321564][ T8206] input: syz1 as /devices/virtual/input/input5 [ 302.338957][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.350189][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.359076][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.361475][ T8210] input: syz1 as /devices/virtual/input/input7 [ 302.397201][ T6895] device veth1_vlan entered promiscuous mode [ 302.436292][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 13:47:47 executing program 0: r0 = socket(0xa, 0x80002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x29, 0x30, 0x0, 0x300) [ 302.454181][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.468547][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.482829][ T3203] Bluetooth: hci1: command 0x0419 tx timeout [ 302.550312][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.558755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.577299][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.586623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.605828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.616366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.626805][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.639482][ T7825] Bluetooth: hci2: command 0x0419 tx timeout [ 302.643632][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 302.671483][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.692676][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 302.717888][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.734738][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.748042][ T6893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.765645][ T6893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.784542][ T6893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.797381][ T6893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.807709][ T7825] Bluetooth: hci3: command 0x0419 tx timeout 13:47:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x9) [ 302.835602][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.854864][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.866484][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.887168][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.900832][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.915208][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:47:48 executing program 0: unshare(0x400) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, 0x0, 0x0) [ 302.927461][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.940089][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.956702][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.020302][ T6891] device veth0_macvtap entered promiscuous mode [ 303.044755][ T2625] Bluetooth: hci4: command 0x0419 tx timeout [ 303.044833][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.068458][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.078882][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.100112][ T6889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.108923][ T6889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.120540][ T6889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.131050][ T6889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.146300][ T28] audit: type=1804 audit(1599140868.530:9): pid=8230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir060161234/syzkaller.9tdDHg/3/bus" dev="sda1" ino=15737 res=1 errno=0 [ 303.191570][ T8192] Bluetooth: hci5: command 0x0419 tx timeout [ 303.213485][ T6891] device veth1_macvtap entered promiscuous mode [ 303.226685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 13:47:48 executing program 0: unshare(0x44000600) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x41, 0xf4, 0x10, 0xfe9, 0xdb00, 0x7d60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0xde, 0x89}}]}}]}}, 0x0) [ 303.235724][ T28] audit: type=1804 audit(1599140868.610:10): pid=8229 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir060161234/syzkaller.9tdDHg/3/bus" dev="sda1" ino=15737 res=1 errno=0 [ 303.280364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.300527][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.308602][ T3203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.321858][ C1] hrtimer: interrupt took 36667 ns [ 303.389455][ T28] audit: type=1804 audit(1599140868.760:11): pid=8232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir231671505/syzkaller.FCX9b1/0/bus" dev="sda1" ino=15740 res=1 errno=0 [ 303.438272][ T6895] device veth0_macvtap entered promiscuous mode [ 303.476990][ T8234] IPVS: ftp: loaded support on port[0] = 21 [ 303.490047][ T6897] device veth0_vlan entered promiscuous mode [ 303.503496][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.521702][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.575344][ T6895] device veth1_macvtap entered promiscuous mode [ 303.648227][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.708043][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.739182][ T3203] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 303.754437][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:47:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000bc0)=""/98, 0x62}, 0x405}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000340)={0x7}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', r2, 0x2f, 0x0, 0x3, 0x8, 0x1, @local, @mcast2, 0x80, 0x1, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0xa8, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) [ 303.799169][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.834084][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.882281][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.937694][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.971784][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.979396][ T3203] usb 1-1: Using ep0 maxpacket: 16 [ 303.992763][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.021009][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.047811][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.097599][ T8250] fuse: Bad value for 'user_id' 13:47:49 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x28c1, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x400001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSRS485(r2, 0x542f, 0x0) close(r0) [ 304.240847][ T6897] device veth1_vlan entered promiscuous mode [ 304.332453][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.349170][ T3203] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db00, bcdDevice=7d.60 [ 304.352635][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.358501][ T3203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.358530][ T3203] usb 1-1: Product: syz [ 304.358543][ T3203] usb 1-1: Manufacturer: syz [ 304.358556][ T3203] usb 1-1: SerialNumber: syz [ 304.394138][ T3203] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 304.441401][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.463015][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.482068][ T28] audit: type=1804 audit(1599140869.850:12): pid=8263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir231671505/syzkaller.FCX9b1/0/bus" dev="sda1" ino=15740 res=1 errno=0 [ 304.579084][ T6891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 304.583433][ T28] audit: type=1804 audit(1599140869.900:13): pid=8232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir231671505/syzkaller.FCX9b1/0/bus" dev="sda1" ino=15740 res=1 errno=0 [ 304.598993][ T6891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.684071][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.721915][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.746102][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.768796][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.801514][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.835112][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.847584][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.866515][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.878269][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.892359][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 13:47:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') lseek(r0, 0xd2, 0x0) [ 304.931970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.952144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.981550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.999941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 13:47:50 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="230000002e0007031dfffd946fa2830020200a0009000000000085680c1ba3a20400ff", 0x23}], 0x1}, 0x0) [ 305.032220][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.067720][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.092943][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.118862][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.128716][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.140287][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.152471][ T6895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.163843][ T6895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.203903][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.243652][ T6891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.264331][ T6891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.304547][ T6891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.318972][ T6891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.360211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.379839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.388698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.419826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.433211][ T6895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.449996][ T6895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.465156][ T6895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.480919][ T6895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.547702][ T6897] device veth0_macvtap entered promiscuous mode [ 305.587118][ T6897] device veth1_macvtap entered promiscuous mode [ 305.708034][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 305.749531][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.774110][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:47:51 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = dup2(r1, r0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = dup2(r2, r3) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0xffffffffffffff0c}, 0xfffffc34) write$9p(r4, &(0x7f0000000040)="fc", 0x1) read(r4, &(0x7f0000001e00)=""/4093, 0xffd) r5 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_proto_private(r5, 0x0, &(0x7f00000001c0)="e289890dd82b04c1a05b28e08b3ed5718355c46fba52e68b9e48829fcaa29189dd20afdb3d67dbb3b7cfe8b6613aed4039d932c43f758f27637a222440c2df6d2a6443afe2883e248e59a6ae0197113ef7622024d4f39b808eda520f738b7d4e6e1e44a5755a6ad63da0ea8a41c68ce48a29f3c617b871ba0364816228aa1c1f") 13:47:51 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28}, 0x28) [ 305.797186][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.812531][ T28] audit: type=1400 audit(1599140871.200:14): avc: denied { write } for pid=8296 comm="syz-executor.4" name="task" dev="proc" ino=31458 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 305.836523][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 305.880620][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.906720][ T28] audit: type=1400 audit(1599140871.220:15): avc: denied { add_name } for pid=8296 comm="syz-executor.4" name="8298" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 13:47:51 executing program 4: memfd_create(0x0, 0x2) io_setup(0x2, &(0x7f00000004c0)=0x0) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], 0x0, 0x0) io_destroy(r0) [ 305.945979][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 305.958971][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.011047][ T28] audit: type=1400 audit(1599140871.240:16): avc: denied { create } for pid=8296 comm="syz-executor.4" name="8298" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 306.019454][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.076570][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.077093][ T28] audit: type=1800 audit(1599140871.280:17): pid=8304 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15767 res=0 errno=0 [ 306.103678][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.169682][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.181539][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.202924][ T2625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.277620][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.331288][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.369873][ T3950] usb 1-1: USB disconnect, device number 2 [ 306.378474][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.419379][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.446183][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.468138][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.486855][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.498425][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.516925][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.539604][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.565438][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.608962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.631209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.641170][ T26] tipc: TX() has been purged, node left! [ 306.646436][ T6897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.666444][ T6897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.676773][ T6897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.692963][ T6897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:47:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x19, 0x0, &(0x7f0000cab000)) 13:47:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000200)='./file0\x00', 0x40bcc41, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001440)='overlay\x00', 0x0, &(0x7f0000001880)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x2c, 'user_u'}}]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)) 13:47:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="071011000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000019c0)={@void, @val={0x0, 0x0, 0x7d}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "89"}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0xfdef) 13:47:52 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) 13:47:52 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000107000000619300008001484f002000670000a9299078ac1e000100000000830b790a010101ac1e000100"]}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000830}, 0x20008000) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getuid() keyctl$invalidate(0x15, r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)) 13:47:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xec02a100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) [ 306.993114][ T8337] ptrace attach of "/root/syz-executor.4"[8335] was attempted by "/root/syz-executor.4"[8337] [ 307.027133][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.055514][ T8346] ptrace attach of "/root/syz-executor.0"[8343] was attempted by "/root/syz-executor.0"[8346] [ 307.072655][ T8343] IPVS: ftp: loaded support on port[0] = 21 [ 307.079586][ T8336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x145000, 0x0) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000000340)=""/121, &(0x7f00000003c0)=0x79) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x415190300) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 13:47:52 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='tunl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000107000000619300008001484f002000670000a9299078ac1e000100000000830b790a010101ac1e000100"]}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000830}, 0x20008000) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getuid() keyctl$invalidate(0x15, r2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)) [ 307.101993][ T8349] overlayfs: unrecognized mount option "context" or missing value [ 307.123816][ T8336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:47:52 executing program 5: mlockall(0x1) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000000000000000480010050000000000339078ac14140000907800"/50], 0x100c) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x7}) keyctl$get_persistent(0x16, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) mlockall(0x3) 13:47:52 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)) [ 307.211073][ T8350] IPVS: ftp: loaded support on port[0] = 21 [ 307.282690][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.332496][ T8347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.352654][ T8363] ptrace attach of "/root/syz-executor.4"[8361] was attempted by "/root/syz-executor.4"[8363] 13:47:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x6, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "97"}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x56}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x15}, {0x0}, {&(0x7f0000000380)=""/102380, 0x18fec}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 13:47:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000000004000007030001", @ANYRES32=r2], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 13:47:53 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x1801, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000001680)="cd", 0xfffffcf0}], 0x1) ioctl$TCSETSF(r3, 0x5403, &(0x7f0000000080)={0x9131, 0x0, 0xfffffffe, 0x0, 0x0, '=u\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\n \x00'}) dup2(r1, r3) [ 307.828567][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:47:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) [ 308.015326][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:47:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5417) 13:47:53 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x175, 0x175, 0x3, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0xc, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "7f"}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}, @fwd, @func, @restrict, @const]}, {0x0, [0x0]}}, 0x0, 0x193}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 308.611151][ T8400] ptrace attach of "/root/syz-executor.1"[8399] was attempted by "/root/syz-executor.1"[8400] 13:47:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x28) wait4(0x0, 0x0, 0x0, 0x0) [ 310.284994][ T8413] ptrace attach of "/root/syz-executor.4"[8412] was attempted by "/root/syz-executor.4"[8413] 13:47:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x13, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x4}]}, 0x20}}, 0x0) 13:47:58 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0xf}, @random="024706370219", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], @echo_reply}}}}}, 0x0) 13:47:58 executing program 1: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f00000000c0)) 13:47:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c575) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000300)=ANY=[], 0x1) 13:47:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001180)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:47:58 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c37c5dadf001965a3ecf29d58989b9e64"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() read$char_usb(r2, &(0x7f00000001c0)=""/157, 0x9d) tkill(r3, 0x25) 13:47:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x415190300) [ 313.034530][ T8428] ptrace attach of "/root/syz-executor.5"[8425] was attempted by "/root/syz-executor.5"[8428] 13:47:58 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x6805, &(0x7f00000013c0)={&(0x7f00000000c0)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0) socket(0x0, 0x2, 0x0) [ 313.086499][ T8429] input: syz1 as /devices/virtual/input/input9 13:47:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) getpeername$inet6(r2, 0x0, &(0x7f0000000180)) open(&(0x7f00000000c0)='./file0\x00', 0x480000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x8, 0x4, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = getpid() write$cgroup_pid(r2, &(0x7f00000001c0)=r5, 0x12) [ 313.234865][ T28] audit: type=1804 audit(1599140878.621:18): pid=8432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir881160846/syzkaller.WxeIze/6/file1/file0" dev="sda1" ino=15802 res=1 errno=0 [ 313.275331][ T8429] input: syz1 as /devices/virtual/input/input10 13:47:58 executing program 0: syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @random="649a6e6fbd3c", @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@dev}]}]}}}}}}, 0x0) [ 313.382859][ T28] audit: type=1804 audit(1599140878.691:19): pid=8444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir881160846/syzkaller.WxeIze/6/file1/file0" dev="sda1" ino=15802 res=1 errno=0 13:47:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa283ff07b8008000140000000000683540150024001d", 0x23}], 0x1}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 13:47:58 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xffffffff, @multicast1}, "00006371ae9b1c01"}}}}}, 0x0) 13:47:58 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '\x01\x00\x83ex=on'}, 0x0, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13:47:59 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) [ 313.552012][ T28] audit: type=1800 audit(1599140878.871:20): pid=8466 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=15803 res=0 errno=0 13:47:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) [ 313.610897][ T8482] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 313.664260][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 13:47:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getpid() symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00') sendmmsg(r5, &(0x7f0000007900), 0x4000099, 0x0) 13:47:59 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) [ 313.725235][ T8482] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 313.761192][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 13:47:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0x14, &(0x7f0000000100), 0x3) 13:47:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) [ 313.958589][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd 13:47:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1518c2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r2, 0xffffffffffffffff, r4) 13:47:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) setpriority(0x0, 0x0, 0x0) 13:47:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0x0, 0xd8, 0xd8, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 314.208069][ T17] usb 2-1: Using ep0 maxpacket: 16 [ 314.222622][ T8515] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 314.248556][ T8515] ipt_CLUSTERIP: Please specify destination IP [ 314.262488][ T8517] ipt_CLUSTERIP: Please specify destination IP [ 314.328339][ T17] usb 2-1: config 0 has no interfaces? [ 314.333896][ T17] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 314.357958][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:47:59 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @enum]}}, 0x0, 0x86}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:47:59 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x200001) 13:47:59 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[], 0x4b) write$9p(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xa198) fcntl$setlease(r0, 0x400, 0x1) [ 314.376812][ T17] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 314.456626][ T8529] ptrace attach of "/root/syz-executor.2"[8528] was attempted by "/root/syz-executor.2"[8529] [ 314.607607][ T8526] ------------[ cut here ]------------ [ 314.628440][ T8526] WARNING: CPU: 1 PID: 8526 at fs/overlayfs/file.c:81 ovl_real_fdget_meta+0x49c/0x530 [ 314.673018][ T8526] Kernel panic - not syncing: panic_on_warn set ... [ 314.679664][ T8526] CPU: 1 PID: 8526 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 314.688256][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.698965][ T8526] Call Trace: [ 314.702394][ T8526] dump_stack+0x198/0x1fd [ 314.706850][ T8526] panic+0x347/0x7c0 [ 314.710771][ T8526] ? __warn_printk+0xf3/0xf3 [ 314.715464][ T8526] ? printk+0xba/0xed [ 314.719465][ T8526] ? log_store.cold+0x16/0x16 [ 314.724160][ T8526] ? __warn.cold+0x5/0x46 [ 314.728510][ T8526] ? ovl_real_fdget_meta+0x49c/0x530 [ 314.733825][ T8526] __warn.cold+0x20/0x46 [ 314.738300][ T8526] ? ovl_real_fdget_meta+0x49c/0x530 [ 314.743619][ T8526] report_bug+0x1bd/0x210 [ 314.748129][ T8526] handle_bug+0x38/0x90 [ 314.752313][ T8526] exc_invalid_op+0x14/0x40 [ 314.756893][ T8526] asm_exc_invalid_op+0x12/0x20 [ 314.761771][ T8526] RIP: 0010:ovl_real_fdget_meta+0x49c/0x530 [ 314.767679][ T8526] Code: ff 4c 89 ff e8 85 81 2a ff e9 ff fc ff ff e8 7b 81 2a ff e9 c5 fc ff ff 4c 89 f7 e8 de 81 2a ff e9 5d fd ff ff e8 24 6f ea fe <0f> 0b 41 bd fb ff ff ff e9 fd fc ff ff e8 62 81 2a ff e9 84 fb ff [ 314.787302][ T8526] RSP: 0018:ffffc90016b27a78 EFLAGS: 00010246 [ 314.793482][ T8526] RAX: 0000000000040000 RBX: 0000000000002000 RCX: ffffc9001190b000 [ 314.801472][ T8526] RDX: 0000000000040000 RSI: ffffffff8289dbdc RDI: 0000000000000005 [ 314.809463][ T8526] RBP: 0000000004068002 R08: 0000000000000000 R09: ffffffff8c5f4af7 [ 314.817455][ T8526] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88808e0cec80 [ 314.825454][ T8526] R13: ffff888083a167b8 R14: 000000000002a002 R15: ffff88808e0ced00 [ 314.833474][ T8526] ? ovl_real_fdget_meta+0x49c/0x530 [ 314.838805][ T8526] ? ovl_real_fdget_meta+0x49c/0x530 [ 314.844122][ T8526] ovl_splice_read+0x83/0x1f0 [ 314.849269][ T8526] ? ovl_mmap+0x2f0/0x2f0 [ 314.853740][ T8526] ? security_file_permission+0x248/0x560 [ 314.859502][ T8526] ? ovl_mmap+0x2f0/0x2f0 [ 314.863974][ T8526] do_splice_to+0x10b/0x170 [ 314.868522][ T8526] splice_direct_to_actor+0x307/0x980 [ 314.873938][ T8526] ? generic_splice_sendpage+0x140/0x140 [ 314.879689][ T8526] ? do_splice_to+0x170/0x170 [ 314.884392][ T8526] ? security_file_permission+0x248/0x560 [ 314.890150][ T8526] do_splice_direct+0x1b3/0x280 [ 314.895026][ T8526] ? splice_direct_to_actor+0x980/0x980 [ 314.900677][ T8526] ? __sb_start_write+0x1d5/0x470 [ 314.905800][ T8526] do_sendfile+0x55f/0xd40 [ 314.910341][ T8526] ? do_compat_pwritev64+0x1b0/0x1b0 [ 314.915777][ T8526] ? __might_fault+0x190/0x1d0 [ 314.920575][ T8526] __x64_sys_sendfile64+0x149/0x210 [ 314.925796][ T8526] ? __ia32_sys_sendfile+0x220/0x220 [ 314.931111][ T8526] ? syscall_enter_from_user_mode+0x20/0x290 [ 314.937120][ T8526] ? lockdep_hardirqs_on+0x53/0x100 [ 314.942351][ T8526] do_syscall_64+0x2d/0x70 [ 314.946792][ T8526] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 314.952700][ T8526] RIP: 0033:0x45d5b9 [ 314.956607][ T8526] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.976224][ T8526] RSP: 002b:00007fb3196b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.984657][ T8526] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 314.992649][ T8526] RDX: 0000000020000200 RSI: 0000000000000003 RDI: 0000000000000003 [ 315.000647][ T8526] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 315.008642][ T8526] R10: 000000000000a198 R11: 0000000000000246 R12: 000000000118cf4c [ 315.016634][ T8526] R13: 00007ffc280f176f R14: 00007fb3196ba9c0 R15: 000000000118cf4c [ 315.026299][ T8526] Kernel Offset: disabled [ 315.030741][ T8526] Rebooting in 86400 seconds..