[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2020/05/15 14:17:04 fuzzer started 2020/05/15 14:17:04 dialing manager at 10.128.0.26:41803 2020/05/15 14:17:05 syscalls: 3005 2020/05/15 14:17:05 code coverage: enabled 2020/05/15 14:17:05 comparison tracing: enabled 2020/05/15 14:17:05 extra coverage: enabled 2020/05/15 14:17:05 setuid sandbox: enabled 2020/05/15 14:17:05 namespace sandbox: enabled 2020/05/15 14:17:05 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/15 14:17:05 fault injection: enabled 2020/05/15 14:17:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/15 14:17:05 net packet injection: enabled 2020/05/15 14:17:05 net device setup: enabled 2020/05/15 14:17:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/15 14:17:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/15 14:17:05 USB emulation: /dev/raw-gadget does not exist 14:20:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) syzkaller login: [ 237.464659][ T7051] IPVS: ftp: loaded support on port[0] = 21 14:20:09 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) [ 237.629369][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 237.760012][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.764614][ T7165] IPVS: ftp: loaded support on port[0] = 21 [ 237.783123][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.791227][ T7051] device bridge_slave_0 entered promiscuous mode [ 237.819178][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.833818][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.841527][ T7051] device bridge_slave_1 entered promiscuous mode [ 237.878266][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.890931][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.922419][ T7051] team0: Port device team_slave_0 added [ 237.939862][ T7051] team0: Port device team_slave_1 added 14:20:09 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_bridge\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @sctp_ip6_spec={@remote, @private1}, {0x0, @local}, @usr_ip6_spec={@ipv4={[], [], @empty}, @mcast2}, {0x0, @local}}}}) [ 237.995742][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.007086][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.054687][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.099611][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.107645][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.137356][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.239471][ T7051] device hsr_slave_0 entered promiscuous mode 14:20:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '\x00(\f\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'kCe#', "ffffffffffffffff"}, 0x38) sendfile(r2, r1, 0x0, 0x100002c00) [ 238.283478][ T7051] device hsr_slave_1 entered promiscuous mode [ 238.376776][ T7278] IPVS: ftp: loaded support on port[0] = 21 [ 238.422201][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 238.579596][ T7344] IPVS: ftp: loaded support on port[0] = 21 14:20:10 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f00000009c0)='./file0\x00', 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) [ 238.747588][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.757990][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.767735][ T7165] device bridge_slave_0 entered promiscuous mode [ 238.811551][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.820754][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.830134][ T7165] device bridge_slave_1 entered promiscuous mode [ 239.023514][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.032759][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 239.093541][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.141302][ T7512] IPVS: ftp: loaded support on port[0] = 21 14:20:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 239.186439][ T7051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.276696][ T7344] chnl_net:caif_netlink_parms(): no params data found [ 239.296402][ T7051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.365859][ T7051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.417051][ T7051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.487637][ T7165] team0: Port device team_slave_0 added [ 239.528299][ T7165] team0: Port device team_slave_1 added [ 239.569460][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.578453][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.589223][ T7278] device bridge_slave_0 entered promiscuous mode [ 239.616425][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.620810][ T7620] IPVS: ftp: loaded support on port[0] = 21 [ 239.623688][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.659218][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.670965][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.678354][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.686792][ T7344] device bridge_slave_0 entered promiscuous mode [ 239.702099][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.709591][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.720457][ T7344] device bridge_slave_1 entered promiscuous mode [ 239.727955][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.738584][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.747086][ T7278] device bridge_slave_1 entered promiscuous mode [ 239.765649][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.772626][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.799815][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.905885][ T7165] device hsr_slave_0 entered promiscuous mode [ 239.943346][ T7165] device hsr_slave_1 entered promiscuous mode [ 239.992976][ T7165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.000765][ T7165] Cannot create hsr debugfs directory [ 240.015602][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.030638][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.042828][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.082078][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.107312][ T7344] team0: Port device team_slave_0 added [ 240.117309][ T7344] team0: Port device team_slave_1 added [ 240.140575][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.147600][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.175964][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.225846][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.234526][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.261776][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.276897][ T7278] team0: Port device team_slave_0 added [ 240.289152][ T7278] team0: Port device team_slave_1 added [ 240.347975][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.355256][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.381801][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.427501][ T7344] device hsr_slave_0 entered promiscuous mode [ 240.473308][ T7344] device hsr_slave_1 entered promiscuous mode [ 240.512899][ T7344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.520469][ T7344] Cannot create hsr debugfs directory [ 240.539396][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.547441][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.574502][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.763153][ T7512] chnl_net:caif_netlink_parms(): no params data found [ 240.871577][ T7278] device hsr_slave_0 entered promiscuous mode [ 240.913908][ T7278] device hsr_slave_1 entered promiscuous mode [ 240.952869][ T7278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.960534][ T7278] Cannot create hsr debugfs directory [ 241.011673][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 241.091142][ T7165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.168998][ T7165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.215008][ T7165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.274591][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.281680][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.293146][ T7512] device bridge_slave_0 entered promiscuous mode [ 241.308193][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.319632][ T7165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.388217][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.395671][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.404861][ T7512] device bridge_slave_1 entered promiscuous mode [ 241.471373][ T7344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.501469][ T7512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.537557][ T7344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.560208][ T7344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.606458][ T7512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.630373][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.638944][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.647973][ T7620] device bridge_slave_0 entered promiscuous mode [ 241.658641][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.667267][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.675894][ T7620] device bridge_slave_1 entered promiscuous mode [ 241.683794][ T7344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.758440][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.767352][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.816402][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.835738][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.847447][ T7512] team0: Port device team_slave_0 added [ 241.860085][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.904518][ T7512] team0: Port device team_slave_1 added [ 241.944504][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.954577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.964041][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.971185][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.980370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.990564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.999662][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.006999][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.015129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.054925][ T7620] team0: Port device team_slave_0 added [ 242.064124][ T7620] team0: Port device team_slave_1 added [ 242.094273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.106608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.115593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.126733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.135592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.144508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.153348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.162002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.178811][ T7278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.249661][ T7278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.305820][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.313986][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.340616][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.355143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.366531][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.374506][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.401675][ T7512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.418670][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.426544][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.453538][ T7512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.475925][ T7278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.527113][ T7278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.575236][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.582209][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.609827][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.697090][ T7512] device hsr_slave_0 entered promiscuous mode [ 242.753133][ T7512] device hsr_slave_1 entered promiscuous mode [ 242.792621][ T7512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.800235][ T7512] Cannot create hsr debugfs directory [ 242.830215][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.842939][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.885638][ T7620] device hsr_slave_0 entered promiscuous mode [ 242.933625][ T7620] device hsr_slave_1 entered promiscuous mode [ 242.972557][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.980143][ T7620] Cannot create hsr debugfs directory [ 242.991223][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.024236][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.119654][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.151115][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.159725][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.169546][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.179124][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.207313][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.219929][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.230738][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.240229][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.247738][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.265905][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.298115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.306323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.317139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.326812][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.333958][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.402248][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.420816][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.430972][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.441006][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.449361][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.458477][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.467964][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.477744][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.486981][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.502899][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.521284][ T7344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.533166][ T7344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.570157][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.579617][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.589245][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.597834][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.606399][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.615395][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.625016][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.632067][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.641472][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.649496][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.692685][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.701310][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.710872][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.718175][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.738019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.759013][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.788284][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.795710][ T7512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.850158][ T7512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.895756][ T7512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.965193][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.974191][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.984230][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.993787][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.034943][ T7512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.091633][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.100723][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.110344][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.124242][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.134521][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.143385][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.159998][ T7165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.173542][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.201468][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.211304][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.220474][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.231569][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.240161][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.249052][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.258003][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.278368][ T7051] device veth0_vlan entered promiscuous mode [ 244.297073][ T7620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.326211][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.334200][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.344895][ T7620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.400612][ T7620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.442053][ T7620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.487362][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.495944][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.506091][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.514762][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.524566][ T7051] device veth1_vlan entered promiscuous mode [ 244.540786][ T7344] device veth0_vlan entered promiscuous mode [ 244.555013][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.569229][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.577782][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.590062][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.615604][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.650798][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.687089][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.696033][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.705499][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.713771][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.722186][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.731208][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.740197][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.751011][ T7344] device veth1_vlan entered promiscuous mode [ 244.767528][ T7051] device veth0_macvtap entered promiscuous mode [ 244.804761][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.814265][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.822661][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.830697][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.840484][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.849536][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.856684][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.866141][ T7051] device veth1_macvtap entered promiscuous mode [ 244.904645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.914130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.922035][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.931244][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.964404][ T7165] device veth0_vlan entered promiscuous mode [ 244.981028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.994302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.002087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.012950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.021504][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.028662][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.037792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.046862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.055787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.065941][ T7344] device veth0_macvtap entered promiscuous mode [ 245.078422][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.095906][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.124092][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.132175][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.141316][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.150526][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.160781][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.169776][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.198333][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.207761][ T7165] device veth1_vlan entered promiscuous mode [ 245.217297][ T7344] device veth1_macvtap entered promiscuous mode [ 245.229782][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.246024][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.256995][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.268798][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.279002][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.290489][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.301241][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.324261][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.403190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.410970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.419481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.428408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.445843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.455503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.464841][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.471881][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.480367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.490442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.500178][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.507335][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.560588][ T7278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.589701][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.602200][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.615345][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.623021][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.630908][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.641161][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.650354][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.660214][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.724156][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.759976][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.793252][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.803412][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.816315][ T7165] device veth0_macvtap entered promiscuous mode [ 245.854791][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.868175][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.892601][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.903320][ T8307] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.911627][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.924568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.933608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.942562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.950975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.960104][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.969013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.978514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.991749][ T7165] device veth1_macvtap entered promiscuous mode [ 246.009836][ T7512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.025214][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.036938][ T8306] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 246.047600][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 14:20:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) [ 246.062870][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.070512][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.102699][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.114228][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.147043][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.207361][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.228854][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.252535][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.262961][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 246.275519][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.286877][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 14:20:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) [ 246.334792][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.346418][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.356123][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.364110][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.371665][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.381903][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.405778][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.420863][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.433497][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.445158][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.459055][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.547685][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.564397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.573458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.591263][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv0 14:20:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) [ 246.741876][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.771465][ T26] audit: type=1804 audit(1589552418.518:2): pid=8329 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir008767342/syzkaller.iNO6c6/0/memory.events" dev="sda1" ino=15744 res=1 [ 246.784490][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.820706][ T26] audit: type=1800 audit(1589552418.548:3): pid=8329 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15744 res=0 14:20:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) [ 246.946817][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.955434][ T26] audit: type=1800 audit(1589552418.698:4): pid=8332 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15744 res=0 [ 246.983046][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:20:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '\x00(\f\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'kCe#', "ffffffffffffffff"}, 0x38) sendfile(r2, r1, 0x0, 0x100002c00) [ 247.002428][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.009564][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.033082][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.053126][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.061658][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.068809][ T4071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.137007][ T26] audit: type=1804 audit(1589552418.888:5): pid=8346 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir008767342/syzkaller.iNO6c6/1/memory.events" dev="sda1" ino=15744 res=1 [ 247.147344][ C0] hrtimer: interrupt took 46267 ns 14:20:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '\x00(\f\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'kCe#', "ffffffffffffffff"}, 0x38) sendfile(r2, r1, 0x0, 0x100002c00) 14:20:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe6c}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 247.227017][ T26] audit: type=1800 audit(1589552418.888:6): pid=8346 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15744 res=0 [ 247.232533][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.300411][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.321821][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.338682][ T26] audit: type=1804 audit(1589552419.088:7): pid=8349 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir008767342/syzkaller.iNO6c6/2/memory.events" dev="sda1" ino=15741 res=1 [ 247.356385][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.379778][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.386268][ T26] audit: type=1800 audit(1589552419.118:8): pid=8349 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15741 res=0 [ 247.403080][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.433224][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.505381][ T7278] device veth0_vlan entered promiscuous mode [ 247.522884][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.540873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.552844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.579951][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.593456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.609930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 14:20:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f00000001c0)=@newsa={0x180, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-serpent-avx\x00'}}}]}, 0x180}}, 0x0) [ 247.642025][ T7278] device veth1_vlan entered promiscuous mode [ 247.684526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.703736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.724971][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.757563][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.791796][ T7620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.809805][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.832768][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.841887][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.851115][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.931898][ T7278] device veth0_macvtap entered promiscuous mode [ 247.963367][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.978592][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.987776][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.996639][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.015164][ T7278] device veth1_macvtap entered promiscuous mode [ 248.033625][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.040946][ T7512] device veth0_vlan entered promiscuous mode [ 248.053632][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.061861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.073683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.084900][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.109598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.117804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.138313][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.149945][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.163871][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.174969][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.185347][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.196500][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.208283][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.223536][ T7512] device veth1_vlan entered promiscuous mode [ 248.260759][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.270259][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.280181][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.293522][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.305231][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.315583][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.326682][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.336603][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 248.347273][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.359520][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.373536][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.390478][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.511748][ T7620] device veth0_vlan entered promiscuous mode [ 248.521046][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.531307][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.541252][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.550040][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.560874][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.569901][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.656397][ T7620] device veth1_vlan entered promiscuous mode [ 248.680396][ T7512] device veth0_macvtap entered promiscuous mode [ 248.712371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.720635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.739027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 14:20:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:20:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '\x00(\f\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'kCe#', "ffffffffffffffff"}, 0x38) sendfile(r2, r1, 0x0, 0x100002c00) [ 248.770105][ T7512] device veth1_macvtap entered promiscuous mode [ 248.790585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.816141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.830429][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.855725][ T26] audit: type=1804 audit(1589552420.608:9): pid=8380 uid=0 auid=0 ses=5 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir008767342/syzkaller.iNO6c6/3/memory.events" dev="sda1" ino=15756 res=1 [ 248.872070][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.883496][ T26] audit: type=1800 audit(1589552420.628:10): pid=8380 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15756 res=0 [ 248.897486][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.926583][ T7620] device veth0_macvtap entered promiscuous mode [ 248.954157][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.985135][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.996333][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.007373][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.019195][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.030230][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.040739][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.052775][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.067186][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.115058][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.134020][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.148549][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.220536][ T7620] device veth1_macvtap entered promiscuous mode [ 249.235524][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.247560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.260403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.272826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.285268][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.296572][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.307418][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.318200][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.328106][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.339834][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.349734][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.360366][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.372090][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.383939][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.394594][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.403332][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.425093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.446734][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.574393][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.585625][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.595550][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.606163][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.616043][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.626554][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.637197][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.649029][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.659203][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.670021][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.681551][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.693168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.701676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.750714][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.769648][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.780105][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.801648][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.822490][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.838659][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.850252][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.865978][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.876965][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.889313][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.901127][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.914884][ T8389] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 14:20:21 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f00000009c0)='./file0\x00', 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) [ 249.969573][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.983827][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.004167][ T8394] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 250.115803][ T8398] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 250.333140][ T8407] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:20:22 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f00000001c0)="bd", &(0x7f0000000380)=""/214}, 0x20) 14:20:22 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x103}, 0x48) 14:20:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 14:20:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 14:20:22 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:20:22 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f00000009c0)='./file0\x00', 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) 14:20:22 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') exit(0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0) [ 250.510394][ T8422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.617510][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:20:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 250.668192][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.685466][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:20:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_bond\x00', {0x3}, 0xff01}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @reserved="308b76f088444e5d1d35ee10246f2c3732af796729c76df4a83aa4a1e188edc3"}}) [ 251.022176][ T8413] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 251.086542][ T8414] syz-executor.2 (8414) used greatest stack depth: 23320 bytes left 14:20:22 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:20:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@wsync='wsync'}]}) 14:20:22 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f00000009c0)='./file0\x00', 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x0) 14:20:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 251.499443][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.506082][ T8496] XFS (loop1): Invalid superblock magic number [ 251.519328][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 14:20:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_bond\x00', {0x3}, 0xff01}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @reserved="308b76f088444e5d1d35ee10246f2c3732af796729c76df4a83aa4a1e188edc3"}}) [ 251.560934][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.599127][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.621970][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 251.878563][ T8493] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 14:20:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x14fb6d27, 0x800000) 14:20:25 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)={0x8, 0x1}, 0x0) 14:20:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@wsync='wsync'}]}) 14:20:25 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:20:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_bond\x00', {0x3}, 0xff01}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @reserved="308b76f088444e5d1d35ee10246f2c3732af796729c76df4a83aa4a1e188edc3"}}) 14:20:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sysfs$2(0x2, 0x9, &(0x7f0000000040)=""/44) [ 253.618140][ T8526] XFS (loop1): Invalid superblock magic number 14:20:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x78, 0x0, 0x2, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 253.758189][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.931067][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.945449][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:20:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@wsync='wsync'}]}) 14:20:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x78, 0x0, 0x2, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 14:20:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_bond\x00', {0x3}, 0xff01}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000100)={{0x2, 0x0, @reserved="308b76f088444e5d1d35ee10246f2c3732af796729c76df4a83aa4a1e188edc3"}}) 14:20:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 14:20:26 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @link_local={0x0}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @loopback}, "08006371ae9b1c01"}}}}}, 0x0) 14:20:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x14fb6d27, 0x800000) 14:20:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x29, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb, '(^mime_type'}}, 0x29) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 14:20:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b60, 0x9bb) [ 254.437170][ T8553] XFS (loop1): Invalid superblock magic number 14:20:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@wsync='wsync'}]}) 14:20:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x78, 0x0, 0x2, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 14:20:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x78, 0x0, 0x2, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 14:20:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x29, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb, '(^mime_type'}}, 0x29) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0xffffffff}, {}, {}, {}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 255.052840][ T8591] XFS (loop1): Invalid superblock magic number 14:20:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf10900001eed5e000000006203005b", 0x48}], 0x1) 14:20:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000002d80)=[{&(0x7f0000001c00)="b55381cca459b6cd48487ded6bf0b7d9731bb898342ae3489191c65a0d14dd9144a10907cd98ec3f42b0f2f8a3929b0edaece8f67e73c7ea3e65c640dd43f3f06d3c722356050ec28b442de61e2b5de7e46370222c00185db4f92d019aeb060e83b4b735cca6549f1ba601b97dac1221a2c03eba943b2011244ad58b34d54c05ba00cb5a17e6ebefcbdad3cd7cf95144283519a1cbe200592a", 0x99}, {&(0x7f0000001cc0)="af46950c95861316e989e97f56a50bb7f9c56145e6ac9bc76d374da8651266f0c8df64d7b00142a5fc405c1d223f99350b1beb52739d33c4ea2bda07f9bb3675bac20c381fed788c5a3897889bd1bc3ce921ca576e2fda30be424d7a08378c0c525a684e327fa2f76ac403aca5061f462cd6e11413f66a40e2b3c1a3069fe5476eafcd78173d55e51153af96ea8ca7dbf4540353256002ef1a6a7eb934f66b584a828128b1d34ad9c5fcb4c22e33facf", 0xffb4}, {&(0x7f0000001d80)="1234334bf706876563897914a67c0249dfcda7e3c313589de04ba94f4d45c41caf87715c88a1ac0b401423cc1602b981a7f9785c28d41904c8165adee1823703e1a4b68a11116d1600f3c78b17fd204cf7405074bf416ce17497236f226ea2bb09a58be4dcce2aa7d188336b200338e53274ac929be4b42d646e47e642acaced356a0e694790414e2bff35c71ed3b42b0ca0bf123645c04f09306ed503a7074bd718fca07c4d5e9484a9db6cdebb60f9056106e389b2d9a03a01ba5c922cd05e71542575e6ebf9227f51302b2599084ee832de3076fb3fca90c9531f6672df70b6abb4f61fb5739ddc65c0d2a04ef44d477508f55138346a2c57534eeff102bc125d80034fd8e9d47f4cf3ae1cb9165e9f66b6ffef51bc55adac06667f9634dbbcfa853f18eef7a02e7211045d6123566151917929218eec4df0061c70a89dc85b93e26eda9c9c04432ddc9abb247628701d16dae1161f2fa24521ada9425a08305bb172a0bf59ca966dc5240a0e74b13ebd5cc1b08222c9c3778aede8cc165988f2b26627d604c551ae43d21a17f8b2a8353569802d7c301a05d303441824f95441ba60dd1945197a1bcf1e84493d13e05d2c13890536ddea29b59365a31ca6dfb2fcce51c0ff82054d67aa257191a70e7396cb7126471644beeb653641855bc18565a21ba1d547c34bffc9d9297e1890a3244151574cfb38ad21fdbcc2184cbb774f38b49485ae7363e35fa04a5a50ef9200776e14dc9679856c39daf39a2b7296d0f6e2a212605b4d914dd52f64acf3fa4f6b506b9d8d8abb19edf9b165767cc1538093939f4720445c5f66f329c5792fdebb34d7505e327628ab43800e895da3690ee0687b83b81b59c82aac8c39d5d73e7486f85c391540bd126ace2a2438af1ae4635d8e63dee743a0efa24ebd53004fdb3b40dbcddcac8c2454521ada565fbf477aee437c24e191ea0065641c39a4b679a14afab9b19d8af28c270546b86c4109e2b4ad07661e95d5969d894f1a8b4498b205ee63f14c34aa57d15fc7121ddcdd5cb27472167a850a38eb6c91fb80979ce8dbf1df7732200271e07456318d44a08eafebd0a5141a00b81cbb1eadc15ad9ea8e35c0b02dc0758c71a9cca41507e66268365ce8a9b191d3e341835d50c647f1216da329ae6cf8c0b4a01b58a8f16e20c4097af34b8eba3bedfeadec84b7a5b9c7fecc9e74924c5068af3c23fa332d941dabd0aa252444655adfaeef13a258609dbd2930bf82d95f5e8849345b1756637e998bac26441a748e258c75c9284405f14adc53e403b3498d6ba951356f2977d7451efab9474849cb7a8bf86d39a05d9a1de6c2458f3a2d5b6d9477ea175739fb14902776c2950001d84304152ef28b057e717ff00b7ea2acf71142cdf26b6fb7cb4012341e4ec1508407fc48865d0bd8e38f78e97dca225de4c1d3b5e175b52df56bfa4650a54caef454b35da1cda6c58cd6fa5aa77fa4d4c39bd0aa90ab9aea103a0e18d8e5e71e19b73f3be0780daa7f7b1ad30fe7d2593e0308c3f3e1e9c7", 0x446}], 0x3}}], 0x300, 0x1) 14:20:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 14:20:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x14fb6d27, 0x800000) 14:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf10900001eed5e000000006203005b", 0x48}], 0x1) 14:20:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000002d80)=[{&(0x7f0000001c00)="b55381cca459b6cd48487ded6bf0b7d9731bb898342ae3489191c65a0d14dd9144a10907cd98ec3f42b0f2f8a3929b0edaece8f67e73c7ea3e65c640dd43f3f06d3c722356050ec28b442de61e2b5de7e46370222c00185db4f92d019aeb060e83b4b735cca6549f1ba601b97dac1221a2c03eba943b2011244ad58b34d54c05ba00cb5a17e6ebefcbdad3cd7cf95144283519a1cbe200592a", 0x99}, {&(0x7f0000001cc0)="af46950c95861316e989e97f56a50bb7f9c56145e6ac9bc76d374da8651266f0c8df64d7b00142a5fc405c1d223f99350b1beb52739d33c4ea2bda07f9bb3675bac20c381fed788c5a3897889bd1bc3ce921ca576e2fda30be424d7a08378c0c525a684e327fa2f76ac403aca5061f462cd6e11413f66a40e2b3c1a3069fe5476eafcd78173d55e51153af96ea8ca7dbf4540353256002ef1a6a7eb934f66b584a828128b1d34ad9c5fcb4c22e33facf", 0xffb4}, {&(0x7f0000001d80)="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", 0x446}], 0x3}}], 0x300, 0x1) 14:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf10900001eed5e000000006203005b", 0x48}], 0x1) 14:20:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 14:20:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x14fb6d27, 0x800000) 14:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf10900001eed5e000000006203005b", 0x48}], 0x1) [ 309.171115][ T0] NOHZ: local_softirq_pending 08 [ 350.135148][ T0] NOHZ: local_softirq_pending 08 [ 391.085240][ T0] NOHZ: local_softirq_pending 08 [ 392.365443][ T0] NOHZ: local_softirq_pending 08 [ 394.285888][ T0] NOHZ: local_softirq_pending 08 [ 411.563589][ T1139] INFO: task syz-executor.2:8612 blocked for more than 143 seconds. [ 411.563610][ T1139] Not tainted 5.7.0-rc5-syzkaller #0 [ 411.563616][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.563623][ T1139] syz-executor.2 D26328 8612 7278 0x00004004 [ 411.563645][ T1139] Call Trace: [ 411.563876][ T1139] ? __schedule+0x937/0x1ff0 [ 411.563918][ T1139] ? print_usage_bug+0x240/0x240 [ 411.563939][ T1139] ? __sched_text_start+0x8/0x8 [ 411.563956][ T1139] ? __lock_acquire+0x2184/0x4c50 [ 411.563977][ T1139] ? schedule+0xd0/0x2a0 [ 411.563992][ T1139] ? schedule_timeout+0x55b/0x850 [ 411.564006][ T1139] ? find_held_lock+0x2d/0x110 [ 411.564020][ T1139] ? usleep_range+0x160/0x160 [ 411.564030][ T1139] ? __down+0x16e/0x2c0 [ 411.564049][ T1139] ? lock_downgrade+0x840/0x840 [ 411.564069][ T1139] ? lock_acquire+0x1f2/0x8f0 [ 411.564083][ T1139] ? _raw_spin_unlock_irq+0x1f/0x80 [ 411.564101][ T1139] ? __down+0x176/0x2c0 [ 411.564117][ T1139] ? __up.isra.0+0x190/0x190 [ 411.564128][ T1139] ? rwlock_bug.part.0+0x90/0x90 [ 411.564153][ T1139] ? down+0x57/0x80 [ 411.564194][ T1139] ? console_lock+0x25/0x80 [ 411.564228][ T1139] ? do_fb_ioctl+0x335/0x6e0 [ 411.564286][ T1139] ? tomoyo_path_number_perm+0x238/0x4d0 [ 411.564299][ T1139] ? fb_mmap+0x550/0x550 [ 411.564313][ T1139] ? tomoyo_execute_permission+0x470/0x470 [ 411.564346][ T1139] ? __fget_files+0x30d/0x500 [ 411.564388][ T1139] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 411.564425][ T1139] ? do_vfs_ioctl+0x50c/0x1360 [ 411.564458][ T1139] ? ksys_dup3+0x3c0/0x3c0 [ 411.564481][ T1139] ? fb_ioctl+0xdd/0x130 [ 411.564494][ T1139] ? do_fb_ioctl+0x6e0/0x6e0 [ 411.564507][ T1139] ? ksys_ioctl+0x11a/0x180 [ 411.564524][ T1139] ? __x64_sys_ioctl+0x6f/0xb0 [ 411.564548][ T1139] ? do_syscall_64+0xf6/0x7d0 [ 411.564566][ T1139] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 411.564590][ T1139] [ 411.564590][ T1139] Showing all locks held in the system: [ 411.564604][ T1139] 1 lock held by khungtaskd/1139: [ 411.564609][ T1139] #0: ffffffff899bea80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 411.564667][ T1139] 1 lock held by in:imklog/6715: [ 411.564671][ T1139] #0: ffff8880a8d47d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 411.564713][ T1139] 2 locks held by syz-executor.5/8614: [ 411.564718][ T1139] [ 411.564723][ T1139] ============================================= [ 411.564723][ T1139] [ 411.564730][ T1139] NMI backtrace for cpu 0 [ 411.564743][ T1139] CPU: 0 PID: 1139 Comm: khungtaskd Not tainted 5.7.0-rc5-syzkaller #0 [ 411.564751][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.564755][ T1139] Call Trace: [ 411.564810][ T1139] dump_stack+0x188/0x20d [ 411.564829][ T1139] nmi_cpu_backtrace.cold+0x70/0xb1 [ 411.564869][ T1139] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 411.564883][ T1139] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 411.564897][ T1139] watchdog+0xa8c/0x1010 [ 411.564915][ T1139] ? reset_hung_task_detector+0x30/0x30 [ 411.564970][ T1139] kthread+0x388/0x470 [ 411.564983][ T1139] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 411.564999][ T1139] ret_from_fork+0x24/0x30 [ 411.565023][ T1139] Sending NMI from CPU 0 to CPUs 1: [ 411.565729][ C1] NMI backtrace for cpu 1 [ 411.565735][ C1] CPU: 1 PID: 8614 Comm: syz-executor.5 Not tainted 5.7.0-rc5-syzkaller #0 [ 411.565740][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.565744][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x4/0x20 [ 411.565754][ C1] Code: b6 f7 31 ff eb 80 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 02 00 00 00 e9 6c ff ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 <89> f2 89 fe bf 04 00 00 00 e9 4e ff ff ff 0f 1f 40 00 66 2e 0f 1f [ 411.565757][ C1] RSP: 0018:ffffc90006cff598 EFLAGS: 00000286 [ 411.565764][ C1] RAX: 0000000000040000 RBX: 0000000000000050 RCX: ffffffff83c3480a [ 411.565769][ C1] RDX: 0000000000040000 RSI: 0000000000000021 RDI: 0000000000000050 [ 411.565773][ C1] RBP: 0000000000000021 R08: ffff8880898c6580 R09: ffffed1043191aec [ 411.565778][ C1] R10: ffff888218c8d75f R11: ffffed1043191aeb R12: ffff8880000a0021 [ 411.565782][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000f0009430 [ 411.565787][ C1] FS: 00007f6e18e81700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 411.565791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.565795][ C1] CR2: 000000c012d80000 CR3: 0000000094ce6000 CR4: 00000000001406e0 [ 411.565800][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.565804][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.565806][ C1] Call Trace: [ 411.565810][ C1] vga16fb_fillrect+0x9da/0x1960 [ 411.565812][ C1] ? memcpy+0x39/0x60 [ 411.565815][ C1] bit_clear_margins+0x2d5/0x4a0 [ 411.565818][ C1] ? bit_bmove+0x210/0x210 [ 411.565821][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 411.565825][ C1] fbcon_clear_margins+0x1de/0x240 [ 411.565828][ C1] fbcon_switch+0xcde/0x16f0 [ 411.565831][ C1] ? fbcon_set_def_font+0x370/0x370 [ 411.565834][ C1] ? fbcon_cursor+0x477/0x650 [ 411.565837][ C1] ? bit_clear+0x4e0/0x4e0 [ 411.565840][ C1] ? is_console_locked+0x5/0x10 [ 411.565843][ C1] ? fbcon_set_origin+0x26/0x50 [ 411.565846][ C1] redraw_screen+0x2ae/0x770 [ 411.565849][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 411.565852][ C1] ? respond_string+0x290/0x290 [ 411.565855][ C1] ? fbcon_set_palette+0x3b1/0x4a0 [ 411.565858][ C1] fbcon_modechanged+0x581/0x720 [ 411.565861][ C1] fbcon_update_vcs+0x3a/0x50 [ 411.565864][ C1] fb_set_var+0xad0/0xd40 [ 411.565867][ C1] ? fb_blank+0x190/0x190 [ 411.565870][ C1] ? mark_held_locks+0xe0/0xe0 [ 411.565874][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 411.565877][ C1] do_fb_ioctl+0x390/0x6e0 [ 411.565879][ C1] ? fb_mmap+0x550/0x550 [ 411.565883][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 411.565886][ C1] ? __fget_files+0x30d/0x500 [ 411.565889][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 411.565892][ C1] ? do_vfs_ioctl+0x50c/0x1360 [ 411.565895][ C1] ? ksys_dup3+0x3c0/0x3c0 [ 411.565898][ C1] ? __x64_sys_futex+0x380/0x4f0 [ 411.565901][ C1] fb_ioctl+0xdd/0x130 [ 411.565904][ C1] ? do_fb_ioctl+0x6e0/0x6e0 [ 411.565907][ C1] ksys_ioctl+0x11a/0x180 [ 411.565910][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 411.565913][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 411.565916][ C1] do_syscall_64+0xf6/0x7d0 [ 411.565919][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 411.565922][ C1] RIP: 0033:0x45c829 [ 411.565932][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.565935][ C1] RSP: 002b:00007f6e18e80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.565943][ C1] RAX: ffffffffffffffda RBX: 00000000004e4860 RCX: 000000000045c829 [ 411.565947][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 411.565952][ C1] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.565956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 411.565961][ C1] R13: 00000000000002f2 R14: 00000000004c54c8 R15: 00007f6e18e816d4 [ 411.572917][ T1139] Kernel panic - not syncing: hung_task: blocked tasks [ 411.572933][ T1139] CPU: 0 PID: 1139 Comm: khungtaskd Not tainted 5.7.0-rc5-syzkaller #0 [ 411.572941][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.572946][ T1139] Call Trace: [ 411.572966][ T1139] dump_stack+0x188/0x20d [ 411.573045][ T1139] panic+0x2e3/0x75c [ 411.573060][ T1139] ? add_taint.cold+0x16/0x16 [ 411.573077][ T1139] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 411.573092][ T1139] ? preempt_schedule_thunk+0x16/0x18 [ 411.573106][ T1139] ? watchdog+0xa8c/0x1010 [ 411.573120][ T1139] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 411.573136][ T1139] watchdog+0xa9d/0x1010 [ 411.573154][ T1139] ? reset_hung_task_detector+0x30/0x30 [ 411.573168][ T1139] kthread+0x388/0x470 [ 411.573181][ T1139] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 411.573198][ T1139] ret_from_fork+0x24/0x30 [ 411.575273][ T1139] Kernel Offset: disabled