[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. 2020/10/08 19:36:09 fuzzer started 2020/10/08 19:36:10 dialing manager at 10.128.0.26:38013 2020/10/08 19:36:10 syscalls: 3450 2020/10/08 19:36:10 code coverage: enabled 2020/10/08 19:36:10 comparison tracing: enabled 2020/10/08 19:36:10 extra coverage: enabled 2020/10/08 19:36:10 setuid sandbox: enabled 2020/10/08 19:36:10 namespace sandbox: enabled 2020/10/08 19:36:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/08 19:36:10 fault injection: enabled 2020/10/08 19:36:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/08 19:36:10 net packet injection: enabled 2020/10/08 19:36:10 net device setup: enabled 2020/10/08 19:36:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/08 19:36:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/08 19:36:10 USB emulation: enabled 2020/10/08 19:36:10 hci packet injection: enabled 2020/10/08 19:36:10 wifi device emulation: enabled 19:39:22 executing program 0: 19:39:22 executing program 1: 19:39:23 executing program 2: 19:39:23 executing program 3: 19:39:23 executing program 4: 19:39:23 executing program 5: syzkaller login: [ 257.791313][ T6892] IPVS: ftp: loaded support on port[0] = 21 [ 258.046360][ T6894] IPVS: ftp: loaded support on port[0] = 21 [ 258.053293][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 258.260288][ T6896] IPVS: ftp: loaded support on port[0] = 21 [ 258.308540][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.317519][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.326941][ T6892] device bridge_slave_0 entered promiscuous mode [ 258.388645][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.399870][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.426824][ T6892] device bridge_slave_1 entered promiscuous mode [ 258.500351][ T6898] IPVS: ftp: loaded support on port[0] = 21 [ 258.528858][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 258.595711][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.662874][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.865662][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 258.873407][ T6900] IPVS: ftp: loaded support on port[0] = 21 [ 258.892806][ T6892] team0: Port device team_slave_0 added [ 258.935614][ T6892] team0: Port device team_slave_1 added [ 258.998295][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.006427][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.015250][ T6894] device bridge_slave_0 entered promiscuous mode [ 259.041307][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.048274][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.076932][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.093573][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.102184][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.109848][ T6894] device bridge_slave_1 entered promiscuous mode [ 259.151499][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.158447][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.185038][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.234165][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.244804][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.253643][ T6896] device bridge_slave_0 entered promiscuous mode [ 259.267947][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.313822][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.323011][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.331652][ T6896] device bridge_slave_1 entered promiscuous mode [ 259.351193][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.419772][ T6892] device hsr_slave_0 entered promiscuous mode [ 259.427393][ T6892] device hsr_slave_1 entered promiscuous mode [ 259.465298][ T6894] team0: Port device team_slave_0 added [ 259.477204][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 259.514402][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.537444][ T6894] team0: Port device team_slave_1 added [ 259.574913][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.627586][ T6896] team0: Port device team_slave_0 added [ 259.677557][ T6896] team0: Port device team_slave_1 added [ 259.689140][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.697298][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.723936][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.731313][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 259.740639][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.740676][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.740685][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.788219][ T6894] device hsr_slave_0 entered promiscuous mode [ 259.796239][ T6894] device hsr_slave_1 entered promiscuous mode [ 259.803568][ T6894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.811587][ T6894] Cannot create hsr debugfs directory [ 259.821578][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 259.897593][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.904793][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.931995][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.969919][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 259.978657][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.986425][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.013667][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.070306][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.077608][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.087069][ T6898] device bridge_slave_0 entered promiscuous mode [ 260.141853][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.148949][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.158560][ T6898] device bridge_slave_1 entered promiscuous mode [ 260.178434][ T6896] device hsr_slave_0 entered promiscuous mode [ 260.189518][ T6896] device hsr_slave_1 entered promiscuous mode [ 260.196675][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.204544][ T6896] Cannot create hsr debugfs directory [ 260.226514][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.235101][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.236233][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 260.244797][ T6900] device bridge_slave_0 entered promiscuous mode [ 260.282326][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.289415][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.299703][ T6900] device bridge_slave_1 entered promiscuous mode [ 260.383236][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.398183][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.416367][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.449972][ T2480] Bluetooth: hci3: command 0x0409 tx timeout [ 260.475737][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.531904][ T6898] team0: Port device team_slave_0 added [ 260.558097][ T6892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.580011][ T6898] team0: Port device team_slave_1 added [ 260.597467][ T6900] team0: Port device team_slave_0 added [ 260.614438][ T6900] team0: Port device team_slave_1 added [ 260.620686][ T6892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.635123][ T6892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.683689][ T6892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.700209][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 260.717122][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.725384][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.752217][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.792780][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.801188][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.828135][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.842386][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.849338][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.875799][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.890151][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.897102][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.924182][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.947639][ T6894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.979569][ T6894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.023965][ T6896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.033867][ T6894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.056869][ T6900] device hsr_slave_0 entered promiscuous mode [ 261.064813][ T6900] device hsr_slave_1 entered promiscuous mode [ 261.071964][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.079520][ T6900] Cannot create hsr debugfs directory [ 261.109471][ T6896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.122486][ T6894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.140859][ T6898] device hsr_slave_0 entered promiscuous mode [ 261.149157][ T6898] device hsr_slave_1 entered promiscuous mode [ 261.156623][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.165104][ T6898] Cannot create hsr debugfs directory [ 261.187377][ T6896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.198221][ T6896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.474121][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.561589][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.592348][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.608079][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.619232][ T6900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.655389][ T6900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.667496][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.678358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.687168][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.694510][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.703540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.722545][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.739612][ T6900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.748977][ T6900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.772612][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.785776][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.797026][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.807992][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.812608][ T7750] Bluetooth: hci0: command 0x041b tx timeout [ 261.815147][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.862433][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.874844][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.896008][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.906144][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.915099][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.923608][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.941539][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.950550][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.958502][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.968937][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.978794][ T6898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.998500][ T6898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.027602][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.037202][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.047387][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.056617][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.066323][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.075376][ T2480] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.082497][ T2480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.090359][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.098071][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.106327][ T6898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.107095][ T2480] Bluetooth: hci1: command 0x041b tx timeout [ 262.135342][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.148680][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.158499][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.167954][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.177140][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.186157][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.193285][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.205157][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.213858][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.222614][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.231457][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.240360][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.247405][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.258230][ T6898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.289742][ T2480] Bluetooth: hci2: command 0x041b tx timeout [ 262.296529][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.305206][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.314129][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.323666][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.333300][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.340434][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.347981][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.356975][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.407345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.416542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.425964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.440468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.449528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.484837][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.493207][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.505525][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.515729][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.529986][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.537460][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.545094][ T7750] Bluetooth: hci3: command 0x041b tx timeout [ 262.553099][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.563852][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.589761][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.598199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.612966][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.623307][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.644844][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.657000][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.668936][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.677502][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.703809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.715991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.737952][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.771462][ T7750] Bluetooth: hci4: command 0x041b tx timeout [ 262.771539][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.802653][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.815873][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.824833][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.832367][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.842439][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.882502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.892371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.900950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.908625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.935180][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.952757][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.972850][ T6892] device veth0_vlan entered promiscuous mode [ 262.980128][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.988457][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.005709][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.018379][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.028020][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.039324][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.049884][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.056933][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.077739][ T6892] device veth1_vlan entered promiscuous mode [ 263.095154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.107192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.116064][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.126433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.135905][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.143044][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.166042][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.201256][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.209375][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.221523][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.230828][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.239341][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.248617][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.286982][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.295576][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.303889][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.314203][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.325145][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.338390][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.353763][ T6892] device veth0_macvtap entered promiscuous mode [ 263.363346][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.373872][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.382994][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.407294][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.416168][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.425254][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.434579][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.441770][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.449297][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.458126][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.466808][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.473961][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.481559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.494944][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.503561][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.512360][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.528594][ T6892] device veth1_macvtap entered promiscuous mode [ 263.549615][ T6896] device veth0_vlan entered promiscuous mode [ 263.574647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.582663][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.593720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.604704][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.616720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.625501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.634678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.643920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.655529][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.664330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.673741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.684094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.692315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.700476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.717740][ T6896] device veth1_vlan entered promiscuous mode [ 263.729716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.738204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.747831][ T6894] device veth0_vlan entered promiscuous mode [ 263.760615][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.774623][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.786712][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.816177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.825258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.837015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.845704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.856989][ T6894] device veth1_vlan entered promiscuous mode [ 263.888443][ T6898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.889648][ T7750] Bluetooth: hci0: command 0x040f tx timeout [ 263.913922][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.934007][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.952769][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.980135][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.002231][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.010949][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.019388][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.029310][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.038348][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.080516][ T6892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.094990][ T6892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.104422][ T6892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.113247][ T6892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.132076][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 264.141367][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.151559][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.174533][ T6896] device veth0_macvtap entered promiscuous mode [ 264.188975][ T6896] device veth1_macvtap entered promiscuous mode [ 264.256266][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.273807][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.284259][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.298915][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.309169][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.318598][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.329019][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.338505][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.352132][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.367168][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 264.373197][ T2480] Bluetooth: hci2: command 0x040f tx timeout [ 264.382801][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.401164][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.412396][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.424453][ T6894] device veth0_macvtap entered promiscuous mode [ 264.455136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.469274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.484148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.497330][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 264.515060][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.528317][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.560140][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.569023][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.598761][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.609866][ T7750] Bluetooth: hci3: command 0x040f tx timeout [ 264.614735][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.626955][ T6894] device veth1_macvtap entered promiscuous mode [ 264.670410][ T6896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.679153][ T6896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.693736][ T6896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.703059][ T6896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.794801][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 264.821111][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.831071][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 264.841996][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.850057][ T7750] Bluetooth: hci4: command 0x040f tx timeout [ 264.854119][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.888771][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.901528][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.917551][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.940347][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.950872][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.958680][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.976202][ T6898] device veth0_vlan entered promiscuous mode [ 264.992359][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.004481][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.015258][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.040834][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.051599][ T6894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.062293][ T6894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.073556][ T6894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.114629][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.123395][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.135580][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.145645][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.157287][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.208924][ T6898] device veth1_vlan entered promiscuous mode [ 265.264971][ T6894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.275692][ T6894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.291352][ T6894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.304010][ T6894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.359975][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.367955][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.386868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.398344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.413279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.422393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.432438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.441195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.448829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.458882][ T6900] device veth0_vlan entered promiscuous mode [ 265.490173][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.498127][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.528435][ T6898] device veth0_macvtap entered promiscuous mode 19:39:31 executing program 0: [ 265.564533][ T6900] device veth1_vlan entered promiscuous mode [ 265.594799][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.607298][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.630190][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.643718][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 19:39:31 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x6a47, &(0x7f0000001100)={0x0, 0xaa8b, 0x0, 0x0, 0x117}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000001180)) [ 265.676348][ T6898] device veth1_macvtap entered promiscuous mode [ 265.750819][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.800759][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.813617][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.832921][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.848520][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.867611][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.878286][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.904093][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.923007][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 19:39:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f00000000c0)) 19:39:32 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000003fc0)={0x0, 0x0, 0x14}, 0x10) [ 265.964366][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.969743][ T2480] Bluetooth: hci0: command 0x0419 tx timeout [ 266.030686][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.041690][ T8051] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 266.085541][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.100698][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 19:39:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x21) [ 266.131793][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 19:39:32 executing program 0: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_wait(r0, &(0x7f0000002400)=[{}], 0x1, 0x0) [ 266.174816][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.209534][ T7750] Bluetooth: hci1: command 0x0419 tx timeout 19:39:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=@abs, 0x400000) sendmsg$unix(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="d1", 0x1}], 0x1}, 0x0) [ 266.225206][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.262115][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.281017][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.320733][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.346891][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.369059][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.382775][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.406321][ T6898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.427108][ T6898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.444692][ T6898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.449962][ T7750] Bluetooth: hci2: command 0x0419 tx timeout [ 266.468031][ T6898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.490302][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.498283][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.524143][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.541987][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.553045][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.591036][ T6900] device veth0_macvtap entered promiscuous mode [ 266.640893][ T6900] device veth1_macvtap entered promiscuous mode [ 266.670607][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.678593][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.704480][ T2480] Bluetooth: hci3: command 0x0419 tx timeout [ 266.746993][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.776403][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.790132][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.807434][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.842306][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.855512][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.866597][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.877941][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.887857][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.898386][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.912224][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.938331][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 266.938403][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.960377][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 19:39:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19:39:33 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000001640)='./file0/../file0\x00', &(0x7f0000001680)=@random={'system.', 'msdos\x00'}) [ 267.001281][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.029210][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.039042][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.085401][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.118993][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.186263][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.229271][ T6900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.264590][ T6900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.278998][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.307320][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.328415][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.349981][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.358273][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.383516][ T6900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.411449][ T6900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.449361][ T6900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.458970][ T6900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.506108][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 267.553346][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.629224][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.647686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.726169][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.779242][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.801268][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 19:39:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x81, 0x4, 0x10000, 0x0, 0x1}, 0x1d) [ 267.828269][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.847645][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.876146][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:39:34 executing program 4: pselect6(0x40, &(0x7f0000000240)={0x0, 0x6, 0x85}, &(0x7f0000000280)={0x5, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x18}, &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x100000001]}, 0x8}) [ 272.771537][ T8156] IPVS: ftp: loaded support on port[0] = 21 [ 272.965256][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 273.034269][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.041494][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.051034][ T8156] device bridge_slave_0 entered promiscuous mode [ 273.061995][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.070128][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.077791][ T8156] device bridge_slave_1 entered promiscuous mode [ 273.104644][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.115913][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.144150][ T8156] team0: Port device team_slave_0 added [ 273.153361][ T8156] team0: Port device team_slave_1 added [ 273.174670][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.183845][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.211268][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.224119][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.231982][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.261226][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.295573][ T8156] device hsr_slave_0 entered promiscuous mode [ 273.304238][ T8156] device hsr_slave_1 entered promiscuous mode [ 273.311618][ T8156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.320084][ T8156] Cannot create hsr debugfs directory [ 273.439565][ T8156] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.448409][ T8156] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.465707][ T8156] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.480028][ T8156] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.512551][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.519815][ T8156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.527503][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.534662][ T8156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.587948][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.604380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.613544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.623417][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.634577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 273.648143][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.665672][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.675267][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.682394][ T7942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.701189][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.710466][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.717523][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.742126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.751777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.760494][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.784457][ T8156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.796033][ T8156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.810188][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.818524][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.841289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.849570][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.857006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.870779][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.939802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.963049][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.972646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.986456][ T8156] device veth0_vlan entered promiscuous mode [ 273.994389][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.003587][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.018237][ T8156] device veth1_vlan entered promiscuous mode [ 274.044391][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.053768][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.061923][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.071157][ T7750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.084097][ T8156] device veth0_macvtap entered promiscuous mode [ 274.099712][ T8156] device veth1_macvtap entered promiscuous mode [ 274.118250][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.130037][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.140785][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.151548][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.162373][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.172909][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.182801][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.194093][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.206357][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.216892][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.228040][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.237038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.246144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.254857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.263582][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.275365][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.287459][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.299363][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.313486][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.323424][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.333950][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.344037][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.354556][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.364700][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.375465][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.387031][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.397438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.407115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.420476][ T8156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.434282][ T8156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.443373][ T8156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.452448][ T8156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.550702][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.561987][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.613304][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.634491][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.642943][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.656820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:39:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(0x0, 0x0) 19:39:40 executing program 2: r0 = creat(&(0x7f0000000e80)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "31ba77d2015fc8ce913c59de8d373c84c02f1c55614d115492af31a71ff7faa516eef179dd24b12ea9fba643a1599e980dcc9af2f1deb6cb763e1e11cb566aefba54eb1a2d63b173751caa4dc3afe86dc1e6422e51d4dac5ecd6ddacf7750baebd9084b19b1df1f21eff549543e018b57feceb84c74e8de168949736e8c4b2f2cb581840cf6018c98e6afe5616927d0b3c2535779ae5bd8be960a7707bfcc156ffe0bb49b2192c39c6f95da714920bb4098f7c05abffea961df4058c94fda557b55c9a3477c28080c9c4106708b710ae7f21a9bcd90b612d451c1e852d81774c1801f89b674296a9dd99e503b7a4ff1cc685205d1c3d3d427355cf79d7b1e591fdf53a871bb9062ba4907f8ed17c69ce2350078aeefdd82f5ee2614cccc1c663b8e1d0db647c1a25a0d900ea1dd963a223fce6d8b45a7bb786d113f3e8c2cdfa9f694b276ec3788f39e7a41c4679cb89aea03982c706208e679a8cd7df1f68ba30aa2ef0d3dd85bb72283fa6b8a330c8252bd710821490c739132edf8a0630cc28000bef12cfdc73840ead40ae51856ada4f0a2b4bfebc1e3906cb366469f0699423523cedacd201e5d0d25974719211195d297ffc5c107f7f7182f28b20b0114c4c531f6481d9bda92a130962e6b0e113a37ace41c8797352903ae45cfd5a0df7a39b81b717569b4cd8a05563c4e67c0302b3f49978be3ff07ee82c0726e4d579d274bcdd4a1ab0be67af957432a86c49c4bb59676ef11c392d9a8f0244c1f7125634713004212bb54928635784c43e437e25006c4d9a002f377a1e7eb37cc0019cef8cc042d22c9256a2218cf2bf8e01c4df9e15c94d84771d9187249400fd4426723ae290d5b1cac0781a0e1ca429ea4cff8f3de532186aa3d05f9db34846b616a5b435334239c3e056cf38299f3d99c3f3fccec89a53b2a31f7996184140bfc569378efc72323ae3548ee54cd6b14fd651a410c772bed7c27dcacf80204fa19d0fc59dee4e2e7ed406c6d2a4d530fe37d01b6ef26242524061fbcd14d87b3a2be3492e5a9108de51e75176da0997332d1a356675a340fbf4491c51241be55dbe4c660dc6b184394d26fdbe13dbed64f5d81fbcc7e137a5c3f34492198a5dc8e3f8331ce7efbae14a94a34612f34019bc120e7d92316748d3cf55e4cfd1dd3f3b1a8c4203f6789a143a32c37dcf424521f90bcafe85458261d07ad37184bd843c4cfb571cf4f115f6ab62048e62244d4bb06138bbbf34932c0c45dbd5805c0aba27640b580ad2f26a8dee3901556c439dee590eb1eac80bd6d33e9205233ea7e5eb62bf4658d43b57c066f262a2efe0f848313dae8ad9ccc6bb34ae4d07065b7ec725819683e4e71768356eff48467a78ae91d92eb68741acb491cc0371fe310927e3ea4b65e75100800f4d537fb2ca44572f48eb78ca0fa9874bba67439dba866a07e239768810cd4ebd8ee3353443863e49c21d4531f6bc40b21d6f25273ab8153da195858a61b8cd562a42fa9d0043b13afb965a414a1c2ef1a0a120eae3b43dca26d42d7e40e928321acb4bd4dff330b3040043e6f682404258a7534915baddd755e4af43ac32f644ac7bddcd814096b36948392e1eb085ada7c586757a82bde16559e7747dbb8f64caa013c3da2fbb94b1a65939096d890ca1b6c157083229af9ce1dd7d1fadf86031529425038683012c0dcbcff1ccdee4faf35fe71553322bc11360559a45e0ca505276f1535b0d050bb3afee88b77706e9b646ff5c202de3c51b687967987cecba6b400bc12505f5ab859e178b707917288e933f78337ce52bba1db3ae63376c97901993740c2a7bcf54f84e4b8e971d3eaf33d7d2524cdb37114cc406fc821256f3a0245f0bd3842f03d8d8cac2b49b6a02bd34c9e48de0958c9e3992326da5cbaa385418feeaa43fc914287289057a5635b0a8932b593e79b6857c331d7fff563495b73feed9999f361c5407a076895e36d9a6b17a73b29b58021a78b353cbc09a069f318d903b7396c02f484d1174339c7d53fff4bcfd97a71ef34e449f4d8971f80678023df4ad212760def027cbd2b50f19614f82db1d21fee1c59c2fe3725d17ad33c6b46ae68147f381a78bbc9fd0af81ac7bc0195e1586a15816a5b0083e23899c4b7a3c94b0e473503bd70ef2ddaae8f0ac87c53c0359da6e4bd76c7acb7e7337c165ba94b694e9796997e6b99e9774113c32ac115239df65b4c3051d86f5ae5080e42509ed998e70ba8e4f16c8f1d22d86eebecf95eb29d84bd201eeeab588792013d5cb0e57ade21a7d270c0e48f3da8205ccddb65225f6c047945d8b69f42fd1741c5cbfe77b3873cf9d6f7b5cd070542b7b2f24c17d0cd5f6a1cb58d4d9ea62b46e48f69a4d36a7a4f46de185ea546e58b60fa1150019717f2b3f7f705c4630a8c0feda8e15758f86f7f5dcba0ec156d993d95d65d392d534d447af839059f703ec24564f1d914b4ad6a9f8d2922ff1a819c4cdf6c4af110b555cb3948ab1671071c0b74f900ee2224666c9962bbcc6fa161d722d0321489c08618702ae6f73aeb3d207d34ba64d30d160dab294c66aec27cdf40c2e2f5a33e7393090ebd01f413d60c040c197ddbaadbc648551ce7d64a94171670126eca748bb57d3b3f7337c9a436eac779a5263fb9081292dbcf5063f90e9c106101a8615b825a2bdff05fdd521d5059db38ede854391633c467badac2da883ed78bb8626900f9fbbdc44d85b7f08fd8c40c07061a3898d9ebe77434afbe62f2d80a44d6f9ea5359de83e13988024c9888a1fecd560f0280388a06e22778457c232f58fdc2c8a94f9fd9bef78caf5b16d74095e920b2056340accaa9e452771c8d0e5160a70af970420c02c1bb084fd3e11c0853ff1da07947f6d65a819dfaa9ed4ad30abb75fd00e2ef9baa83844d20bf448146ebe70a064fef14ecbd4d1e998e8d531a22f7788e65a7bd5d3a814e88ed5ba16d3b8e9b13c6690389f52e76299d73c8dc3ebdfed219c48baf95925e4b83dfefb9a26653fc3607ef8b89e9d481bc271bfdec60ef561ee21af9af624d33b6fa80040b44f9ab3f932b20f275ab56b517793fb0b383fb3bc2aa1b69ac736f4a7060a9cee82e1cd42ca02a8f06a31d6d813c25e4b591207bfd24c0f5953941147fecb597ee7980f1fee0bf14ed349bf48d1b34a61cae458d5fdbccbe15eff90350192fe57885b054e28161f9d8b73be426aaa2aebdffa4197bf3bf394df74a86f75d984ebf599eb7278773cbdc68516b091ecc5be62374ec4282e6383a7f41f2d5aa52588726e9164088d94059d1864e1281d5b1e4201fa5c01dd732224ee7ae332acda9b020ab7d7029499a09ed9979fe10f73874c7363a37602f856a277707cfa83f48c820baae7975ed86b86290600d9065d212914ae370e32cac071e9ef69f3431fb879a2bccbdb487c8f02520296a3903971443a6bd33a6f12d0681c4c480c24505f918a0d3121d4e22802c85de14f4fc5f3c235d900be6546179de2cc283c0e52df7487cefdc611ddf81b59a52bcd13837f20a498151dc32cc65470fd4d2756f6dbc4062bd482a9ea73644c784bbc28230ef7433749268495279a18b47fb2cc4eb4797eb8b8da0a37dac40cf54cbce478292193822a8611f760864e0f369c664cb5e766bfee334aa5e7da692715bc36d1b01d6c6b2c5480578ab70b8d6e3fbb287b74770bc706a0239a93ecbf5ffa3d1d8933062b77031e451e9eddeb582520014d8ee1f3d0081e1bd701404b1eaca63b535c903aa3a23f961d3e921d4f1547c5cdc28d12a086da069baa0ad1c59a957297415ffc37a1aef191779128bcac7748222381a1fc0bdac2f93202f489d5cf10304db32755eb1a2e080dba055bdde9752b33869657f87704e360b8a53ee81ad561d5d575efac610801cb56c94d2c0ec8d21ad49dcac72ceb877cbfc275e122622f1a78c356753944b1aa58f37e555916a6f0c486024bcf74005971f0c7421017a7c6813d8a05e9638a6ed554f318166260c231b27035775fcaaa4697e0e9e6c8179a3f3cbcabfe2b04e76a9f29a8bb8e590b22ba9442741ee3fd764df8186aa70875b60ecb02fa35020f3c5c34397e2913231e79a3ee3fdb0ba4b58e7c44eadf6484dca51bfe6ca1c3cc216da5c3d12faec1eef5423037453435a373466c706507cebdea147df9fc2b8a24ee0372743074a1f837ffcc3b4f906a0f3009cc20fe9596862417fe04316470a27eee0cc95c923cf79bbeb4c386b53213bbde623a0a9e3fe1bda489c33876cd4f22988107d34f0391a1513829f00a54cdec6dde667f0c0d86a7d83ad9fc54a3c807ce993282f3b927a9e52b58614679083a43cd1b4dd9dbc9c4446891e611e2259a2cd694f08c2e947e049ce2e27ee4130122079b9683045b46cf34623eb43ba894be37e0c18d1ec613be66957290505fb65c51ccc9869d436be018d79bb9fbb2f5ffc4661e21862e6ee9d53ad4f90f04881919b2a84aa6a549ffb4e6a0625ab4eb2ae391a0c7cb44cad865a4547c2df3362adc94824c1a2d1a4ac388c1fd3fc311b30294ebda7fda84f1b4a19390174a84e8418ffe637bcc703b1d125aed6e5567562ace6e8c7789562d361adc32a5bcc02b94481db823769b3dfe4be0c4485062d0252807cd2c5181437e905ee2809e15bc2df49f14af00c842ff29ba679c7c8a99e42789a28dae82b2b3fcd32e569751dd9eaa63cfa6e07d940059616f007f63172c4346805f7220bdbc6c7546ca87648246acf5c562a4842b65a4e4add5ad612d30cf6eb157a2260dfc1fe9ba73fd1d75e09910db05e11c89f8ab471de944de0cb56872ba4b2345b7b08cd7f52aeb793710dc0de5a2c4b974d339c542cf64f7a12f7b126b7b58157f7614b14aa8f194d510aba83b06070176d790a83be7cc1ddfe56bee8d6ed4c15dbee16bbf738dbb291eaa9c61908da687ebeaa3a3cc737ebe676aa22182f4705f7af91efea2fcd1ab400932f2681ca5559ad8dea853126184fdc3f6dfa718b8cc7543801667bb97ce408b30d68a1666ff3d7abbe9076ea287315e69410de6ff947d4eba2577cc8656bae2bd1f28b2c681b7e46144d1d5865ea6fa3c9fc6419f3157860e9482bc5dc65137e286611c16aa80f5e24296ec1fe58a1afbf95604f5bc5455af387bc21b4093afdc7c37fe7a60e7f8738d827accb6a8628cca03aec648e25af1c1252387ac2702414e830f68ad48969eba1bc41850cc01693b7a20c85557b6b8a956d086fe3cc6fe17c6c2284ae1b4c8ecf23cafccb5d239c6011ac6680c4921f89b9d286eabaff18cd1dab5d9355a9b6671688d808f3ccb238fff777cc1bfe4b3a7558d977110b548c6cbf325461b5b78b28e26b53ce1d0fd3733f50af9ee550b9c8a3d3e197f10100cc1627b543641bfd9796f99632c65afb10e071ba0d10ad3338c57e3162fc2e40e7d211da6d73c287ade22b025286f34a97fe0fc9c9317060092001ba6c4b35f15627f9d7d384b56e4e58c83ee58040ed8e360953bdfd862e1aba94dda292faafa1f46f5e60fbd4bb5065cff671d526a2abab12e5cbb27ca25d4586a610b3233aa8043c6a143c9f240883ab3f06e82a0c0a4cd251abedc69417f475ffcc2c6cbdffe4b2dfa3b648e57b8feb6ceab7756b9eccf2469cb6e3cea10b29065c6ae3fa81ea3be1353660a3d7aa9ded61d693caf169165660d4fc552eba09d5d9d216de748734bb58602b3179ff6bc13847b31a1dc4b693af765046947633761e51cd70538aacc9ba22a3cd7"}, 0x1001) 19:39:40 executing program 0: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 19:39:40 executing program 1: syz_io_uring_setup(0x6628, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:39:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'rose0\x00', 0x0}) 19:39:40 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) [ 274.769033][ T7942] Bluetooth: hci5: command 0x0409 tx timeout 19:39:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000400)) 19:39:41 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 19:39:41 executing program 5: creat(&(0x7f0000000000)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 19:39:41 executing program 2: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) write$nbd(r0, 0x0, 0x0) 19:39:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000280)) [ 274.971128][ T8423] 9pnet: p9_fd_create_tcp (8423): problem connecting socket to 127.0.0.1 19:39:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 19:39:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002840)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 19:39:41 executing program 2: pipe2(&(0x7f0000000500), 0x0) 19:39:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 19:39:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000700)={[{@fat=@gid={'gid'}}]}) [ 275.214624][ T8435] FAT-fs (loop5): bogus number of reserved sectors [ 275.221938][ T8435] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 275.231526][ T8435] FAT-fs (loop5): Can't find a valid FAT filesystem 19:39:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x13, 0x0, 0x0, &(0x7f0000002040)}) [ 275.348779][ T8443] FAT-fs (loop3): bogus number of reserved sectors [ 275.359803][ T8435] FAT-fs (loop5): bogus number of reserved sectors [ 275.362673][ T8443] FAT-fs (loop3): Can't find a valid FAT filesystem [ 275.373505][ T8435] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 275.396862][ T8435] FAT-fs (loop5): Can't find a valid FAT filesystem [ 275.470805][ T8443] FAT-fs (loop3): bogus number of reserved sectors [ 275.477547][ T8443] FAT-fs (loop3): Can't find a valid FAT filesystem 19:39:41 executing program 4: creat(&(0x7f0000001200)='./file1\x00', 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/71, 0x47) 19:39:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000240)) 19:39:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 19:39:41 executing program 1: creat(&(0x7f0000001200)='./file1\x00', 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 19:39:41 executing program 5: socketpair(0x25, 0x0, 0x0, &(0x7f00000004c0)) 19:39:41 executing program 3: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x8800000}], 0x0, 0x0) 19:39:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:39:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 19:39:42 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000000)) 19:39:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xc008, &(0x7f0000000400)={[{@fat=@errors_remount='errors=remount-ro'}], [{@dont_measure='dont_measure'}]}) 19:39:42 executing program 4: pselect6(0x40, &(0x7f0000000240)={0x1}, 0x0, &(0x7f00000002c0)={0x4}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x100000001]}, 0x8}) 19:39:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1b, 0x0, 0xdc}, 0x40) 19:39:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="4bdc656628d544056f4aa44d3140", 0xe}, {&(0x7f0000000200)="d0", 0x1}, {&(0x7f0000000280)="c4", 0x1}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@timestamping={{0x14}}], 0x18}}], 0x2, 0x0) 19:39:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) 19:39:42 executing program 4: pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) 19:39:42 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x484b01, 0x0) 19:39:42 executing program 2: timer_create(0x3, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000000c0)) 19:39:42 executing program 3: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r1, &(0x7f0000004500)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x9}}}, 0x28) 19:39:42 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 19:39:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={&(0x7f0000002740), 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 19:39:42 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000004500)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x65, 0x0, 0x4, 0x1, 0x0, @private, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x28) 19:39:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000000240)={[], [{@uid_eq={'uid'}}]}) 19:39:42 executing program 0: io_uring_setup(0x554a, &(0x7f0000000040)={0x0, 0x0, 0x8}) 19:39:42 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x100000001]}, 0x8}) 19:39:42 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') 19:39:42 executing program 5: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x5}, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) [ 276.679816][ T8520] FAT-fs (loop2): bogus number of reserved sectors [ 276.701462][ T8520] FAT-fs (loop2): Can't find a valid FAT filesystem [ 276.805460][ T8520] FAT-fs (loop2): bogus number of reserved sectors [ 276.812919][ T8520] FAT-fs (loop2): Can't find a valid FAT filesystem [ 276.848959][ T5] Bluetooth: hci5: command 0x041b tx timeout 19:39:43 executing program 4: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000100)=""/196) msgctl$IPC_RMID(0x0, 0x0) eventfd2(0x8, 0x80000) 19:39:43 executing program 3: socket$inet(0x2, 0x80003, 0x0) 19:39:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002900)={0x0}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 19:39:43 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000c00)={&(0x7f0000000bc0), 0x8}) 19:39:43 executing program 2: creat(&(0x7f0000000000)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 19:39:43 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000100)='./file0\x00', 0x0) [ 277.149691][ T8545] 9pnet_virtio: no channels available for device 127.0.0.1 19:39:43 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff}, 0xc) 19:39:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) 19:39:43 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002500)={0x10000005}) 19:39:43 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x6a47, &(0x7f0000001100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000001180)) 19:39:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x4, "bfda1f53"}, &(0x7f0000000180)=0x28) 19:39:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/186, &(0x7f00000000c0)=0xba) 19:39:43 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:39:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:43 executing program 3: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) creat(&(0x7f0000001200)='./file1\x00', 0x0) futimesat(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}) 19:39:43 executing program 5: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r1, &(0x7f0000004500)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @timestamp}}, 0x28) 19:39:43 executing program 1: creat(&(0x7f0000000000)='./file1\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 19:39:43 executing program 3: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, 0x0) 19:39:43 executing program 2: syz_io_uring_setup(0x3d19, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:39:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9}, 0x40) 19:39:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:44 executing program 1: write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) 19:39:44 executing program 5: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$tun(r0, 0x0, 0x0) 19:39:44 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000025c0)={0x5}) 19:39:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:39:44 executing program 2: creat(&(0x7f0000000000)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_u='version=9p2000.u'}, {@cache_fscache='cache=fscache'}], [{@euid_eq={'euid'}}]}}) 19:39:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:44 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x2) 19:39:44 executing program 1: socket$inet6_icmp_raw(0x2c, 0x3, 0x3a) 19:39:44 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x50000, 0x0) [ 278.030074][ T8614] 9pnet: p9_fd_create_tcp (8614): problem connecting socket to 127.0.0.1 19:39:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:44 executing program 0: socket$inet6(0xa, 0x0, 0x729) 19:39:44 executing program 2: syz_io_uring_setup(0x16b1, &(0x7f0000000180)={0x0, 0xc279, 0x10, 0x3, 0x10d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) 19:39:44 executing program 1: syz_io_uring_setup(0x3d19, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), 0x0) 19:39:44 executing program 5: setresuid(0x0, 0xee00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f000000e480)={0x12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 19:39:44 executing program 3: pipe2(&(0x7f0000002340), 0x0) 19:39:44 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:44 executing program 0: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 19:39:44 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19:39:44 executing program 5: pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 19:39:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@bcast, @null, @null, @rose, @rose, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000180)=[{0xffffffffffffffff, 0x35}], 0x1}, 0x0) 19:39:44 executing program 3: io_uring_setup(0x554a, &(0x7f0000000040)) 19:39:44 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 19:39:44 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x22003, 0x0) 19:39:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x1, &(0x7f0000000300)=@raw=[@alu], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:39:44 executing program 3: pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x4}, &(0x7f0000000300)={0x77359400}, 0x0) 19:39:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) 19:39:44 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:45 executing program 2: mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) 19:39:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 278.928555][ T12] Bluetooth: hci5: command 0x040f tx timeout 19:39:45 executing program 5: creat(&(0x7f0000001200)='./file1\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-'}, 0x16, 0x0) 19:39:45 executing program 1: 19:39:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002900)={0x0}}, 0x0) 19:39:45 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair(0x25, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz0\x00', 0x200002, 0x0) 19:39:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:45 executing program 1: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 19:39:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:45 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 19:39:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 19:39:45 executing program 2: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 19:39:45 executing program 5: syz_io_uring_setup(0x6c04, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:39:46 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000002440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:39:46 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002500)) 19:39:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:39:46 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) pipe2(&(0x7f0000002340), 0x0) 19:39:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 19:39:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETX(r0, 0x5432, 0x0) 19:39:46 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1041884, &(0x7f0000000440)) 19:39:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 19:39:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001740)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@quiet='quiet'}]}) 19:39:46 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000007f80)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x0, @dev}, 0x86, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x9, 0x92, 0x4}) 19:39:46 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44100, 0x0) 19:39:46 executing program 3: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) 19:39:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) [ 280.310637][ T8741] FAT-fs (loop0): bogus number of reserved sectors [ 280.380059][ T8741] FAT-fs (loop0): Can't find a valid FAT filesystem 19:39:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 19:39:46 executing program 1: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 280.453545][ T8741] FAT-fs (loop0): bogus number of reserved sectors [ 280.475819][ T8741] FAT-fs (loop0): Can't find a valid FAT filesystem 19:39:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x309002, 0x0) 19:39:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="b6057e066531be4bff17c6f31c66", 0xe, 0x1}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000002c0)) 19:39:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 19:39:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000280)="c4", 0x1}], 0x3}}], 0x1, 0x0) 19:39:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) [ 280.819457][ T8769] FAT-fs (loop3): bogus number of FAT structure [ 280.825916][ T8769] FAT-fs (loop3): Can't find a valid FAT filesystem [ 280.915722][ T8769] FAT-fs (loop3): bogus number of FAT structure [ 280.924753][ T8769] FAT-fs (loop3): Can't find a valid FAT filesystem [ 281.008742][ T12] Bluetooth: hci5: command 0x0419 tx timeout 19:39:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000006080)={'batadv0\x00'}) 19:39:47 executing program 0: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) inotify_rm_watch(r0, 0x0) 19:39:47 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 19:39:47 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:47 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') pipe2(0x0, 0x0) 19:39:47 executing program 5: r0 = io_uring_setup(0x4b89, &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0], 0x1) 19:39:47 executing program 4: creat(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='security.evm\x00', 0x0, 0x9, 0x0) 19:39:47 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x300, 0x0) 19:39:47 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x3, r0, &(0x7f0000002500)={0x10000005}) 19:39:47 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 19:39:47 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:47 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x2, 0x0) 19:39:47 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz0\x00', 0x200002, 0x0) 19:39:47 executing program 0: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) 19:39:47 executing program 3: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) connect$unix(r0, 0x0, 0x0) 19:39:47 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[], [{@appraise_type='appraise_type=imasig'}]}) 19:39:48 executing program 5: get_mempolicy(0x0, &(0x7f0000000100), 0x800, &(0x7f0000ffd000/0x1000)=nil, 0x0) 19:39:48 executing program 2: quotactl(0x0, &(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) 19:39:48 executing program 4: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 281.997074][ T8854] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value 19:39:48 executing program 0: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r1, &(0x7f0000004500)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @timestamp}}, 0x28) 19:39:48 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:48 executing program 4: pselect6(0x40, &(0x7f0000000240)={0x1}, &(0x7f0000000280)={0x5}, &(0x7f00000002c0), &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x100000001]}, 0x8}) 19:39:48 executing program 5: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x80000012) 19:39:48 executing program 2: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f0000000300)={0x3}, 0x8, 0x0) [ 282.127476][ T8854] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value 19:39:48 executing program 3: r0 = creat(&(0x7f0000001200)='./file1\x00', 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1}, 0x10) 19:39:48 executing program 0: pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r1, &(0x7f0000004500)={@void, @void, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @timestamp}}, 0x28) 19:39:48 executing program 4: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) 19:39:48 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) 19:39:48 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:48 executing program 5: syz_io_uring_setup(0x6c04, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:39:48 executing program 3: socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 19:39:48 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000000)) 19:39:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19:39:48 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x8100, 0x0) 19:39:48 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)={0x14, r1, 0x39bc555ee1698faf}, 0x14}}, 0x0) 19:39:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19:39:49 executing program 5: epoll_wait(0xffffffffffffffff, &(0x7f0000002400)=[{}], 0x1, 0x0) 19:39:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 19:39:49 executing program 2: creat(&(0x7f0000001200)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 19:39:49 executing program 0: creat(&(0x7f0000000000)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 19:39:49 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:49 executing program 3: creat(&(0x7f0000001200)='./file1\x00', 0x0) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 19:39:49 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:49 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:49 executing program 4: epoll_create(0x9fbe) 19:39:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 19:39:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 19:39:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f000000e480)={0x16, 0x0, 0xfffff000, 0x1e, 0x30, 0x1}, 0x40) 19:39:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000600)) 19:39:49 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002500)) 19:39:49 executing program 1: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="d1", 0x1}], 0x1, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) 19:39:50 executing program 4: creat(&(0x7f0000001200)='./file1\x00', 0x0) creat(&(0x7f00000000c0)='./file1/../file0\x00', 0x0) 19:39:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000007f80)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}) 19:39:50 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="4bdc656628d544056f4aa44d3140", 0xe}, {&(0x7f0000000200)="d0", 0x1}, {&(0x7f0000000280)="c4", 0x1}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@timestamping={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x2, 0x0) 19:39:50 executing program 5: pipe2(&(0x7f0000000000), 0x84800) 19:39:50 executing program 4: creat(&(0x7f0000001200)='./file1\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) 19:39:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000001280)) 19:39:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0)={[{@fat=@gid={'gid', 0x3d, 0xee00}}]}) 19:39:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) 19:39:50 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r4, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x70) renameat(r2, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, r5}, 0x78) getpgid(0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @private=0xa010101}, {0x1, @dev={[], 0x1d}}, 0x0, {0x2, 0x4e23, @private=0xa010101}, 'veth0_to_bond\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) write(r7, 0x0, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0xfd}, 0x14) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 19:39:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 284.168374][ T8984] FAT-fs (loop2): bogus number of reserved sectors 19:39:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x1ff}, {}]}}) [ 284.214319][ C0] hrtimer: interrupt took 32015 ns [ 284.228971][ T8984] FAT-fs (loop2): Can't find a valid FAT filesystem [ 284.362162][ T8984] FAT-fs (loop2): bogus number of reserved sectors 19:39:50 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) [ 284.406376][ T8984] FAT-fs (loop2): Can't find a valid FAT filesystem 19:39:50 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x8c0, 0x0) 19:39:50 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x0) 19:39:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r4, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x70) renameat(r2, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, r5}, 0x78) getpgid(0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @private=0xa010101}, {0x1, @dev={[], 0x1d}}, 0x0, {0x2, 0x4e23, @private=0xa010101}, 'veth0_to_bond\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) write(r7, 0x0, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0xfd}, 0x14) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 19:39:50 executing program 1: r0 = io_uring_setup(0x3a7d, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r4, 0xc0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x70) renameat(r2, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10, r5}, 0x78) getpgid(0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @private=0xa010101}, {0x1, @dev={[], 0x1d}}, 0x0, {0x2, 0x4e23, @private=0xa010101}, 'veth0_to_bond\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) write(r7, 0x0, 0x0) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0xfd}, 0x14) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 19:39:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x85080000, &(0x7f0000001280)) 19:39:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netpci0\x00', 0x0}) 19:39:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="d1", 0x1}], 0x1}, 0x0) 19:39:51 executing program 1: r0 = io_uring_setup(0x3a7d, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:51 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000025c0)={0x5, 0x41, "d8a1fd7d85b4804f4cc36b95740a36aab447029ed238f61c8fc383ad5e451fab993752a46698be3b44729f5759ce3c2fd528a2ddcaf71a47ccceb6839e585ee86d"}) 19:39:51 executing program 2: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x600}, {0x0}], 0x0, 0x0) 19:39:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1e6) 19:39:51 executing program 1: r0 = io_uring_setup(0x3a7d, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:51 executing program 5: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 19:39:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x5d, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 19:39:51 executing program 4: creat(&(0x7f0000001200)='./file1\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') 19:39:51 executing program 1: io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:51 executing program 2: timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000000)) 19:39:51 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) 19:39:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:39:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x984, 0x4) 19:39:51 executing program 1: io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x9, 0xffff) 19:39:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10b382) r1 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "659f40ffca4a78e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d489755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 19:39:51 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 19:39:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x06\x00\x00\x00\x00\x04\x00\x00\x102\xffk&\xbe\xde\xfe\xc9<\xb0\x8d\x1b\n\xef\r\xdc2(Xr*&\xb3}\x10\xdf2\xd2N+l\x89\x86\x81\x02\x16F\xebg\xc9\\&\x1b\x1d\x1e;;K\xda\xaf\xd4\xc3\x8c\xb8m\xb6D\xb2%<\xc0P3\\\x87\xef\xb3\xee\xae(\x01\xc6\xcaL\x12\"\xfd\xde\xdb&k\xfed\x90\\y\x19Q\n', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2302"], 0x2) close(r1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0202"], 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19:39:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @random="f8968583fe2f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x54, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "cf317901c738b823619bc18f06ead949"}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xd, "075bbfb64054e076de437b"}, @mptcp=@ack={0x1e, 0xa, 0x0, 0x4, "a6acbba1a9cc"}, @sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 19:39:52 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x0, @rand_addr=' \x01\x00', @ipv4={[], [], @multicast1}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 19:39:52 executing program 1: io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}, {0x0}], 0x3) 19:39:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 19:39:52 executing program 2: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, @rand_addr, @multicast1}, @info_request}}}}, 0x0) 19:39:52 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 19:39:52 executing program 4: r0 = socket(0x400000000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) 19:39:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000014c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)='F', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001b00)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='D', 0x1}], 0x1}}], 0x5, 0x60cd8c0) 19:39:52 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:39:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(r0, 0x4, 0x34c075c8caddbf60) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast1}, 0x40}}, 0x50}}, 0x0) 19:39:52 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000300)={@dev, @dev, @val={@void}, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:39:52 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 19:39:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x4}, 0x0) [ 286.443955][ T9121] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:39:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000000010, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) 19:39:52 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 19:39:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x39) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @remote, 0x2}, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 19:39:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="080000000a00000000000000ff"], 0x90) 19:39:52 executing program 2: 19:39:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x4}, 0x0) 19:39:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r1, &(0x7f00000000c0)=0x9, 0xffff) 19:39:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10b382) r1 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000440)="81", 0x1}], 0x2, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d00) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x9, 0x4, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "659f40ffca4a78e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d489755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 19:39:53 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19402, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)='k8', 0x2}], 0x1, 0x0) 19:39:53 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 19:39:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10b382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, 0x4, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "659f40ffca4a78e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d489755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 19:39:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "593c4fbbcf9ade1c69b9b1f2a76f5353ee9c62e16170127f5e407e886fd763af47c7154f2446155cf11a5f0a8186e936969b408fe09300e90d8486fb1d1b0e"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="d16b840121cdf127a285c6ea43be", 0xe}], 0x1}}], 0x1, 0x0) 19:39:53 executing program 0: 19:39:53 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/220, 0xdc}], 0x2) [ 287.197894][ T9175] loop_set_status: loop0 () has still dirty pages (nrpages=19) [ 287.237761][ C1] [ 287.240339][ C1] ================================ [ 287.245464][ C1] WARNING: inconsistent lock state [ 287.250892][ C1] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 287.257393][ C1] -------------------------------- [ 287.262621][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 287.269919][ C1] syz-executor.3/6898 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 287.276766][ C1] ffff888025e2a018 (&xa->xa_lock#8){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 [ 287.285498][ C1] {SOFTIRQ-ON-W} state was registered at: [ 287.291212][ C1] lock_acquire+0x1f2/0xaa0 [ 287.295858][ C1] _raw_spin_lock+0x2a/0x40 [ 287.300527][ C1] io_uring_add_task_file+0x207/0x430 [ 287.306115][ C1] io_uring_setup+0x2727/0x3660 [ 287.311079][ C1] do_syscall_64+0x2d/0x70 [ 287.315681][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.321668][ C1] irq event stamp: 552959 [ 287.326005][ C1] hardirqs last enabled at (552958): [] _raw_spin_unlock_irqrestore+0x6f/0x90 [ 287.336632][ C1] hardirqs last disabled at (552959): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 287.346847][ C1] softirqs last enabled at (548098): [] asm_call_irq_on_stack+0xf/0x20 [ 287.356762][ C1] softirqs last disabled at (552917): [] asm_call_irq_on_stack+0xf/0x20 [ 287.366963][ C1] [ 287.366963][ C1] other info that might help us debug this: [ 287.375139][ C1] Possible unsafe locking scenario: [ 287.375139][ C1] [ 287.382638][ C1] CPU0 [ 287.385911][ C1] ---- [ 287.389263][ C1] lock(&xa->xa_lock#8); [ 287.393608][ C1] [ 287.397193][ C1] lock(&xa->xa_lock#8); [ 287.401709][ C1] [ 287.401709][ C1] *** DEADLOCK *** [ 287.401709][ C1] [ 287.409957][ C1] 4 locks held by syz-executor.3/6898: [ 287.415586][ C1] #0: ffff8881376f8460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3a/0xb0 [ 287.425026][ C1] #1: ffff888074b25608 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x27d/0x660 [ 287.435446][ C1] #2: ffffffff8abc0880 (tomoyo_ss){....}-{0:0}, at: tomoyo_path_perm+0x1c1/0x400 [ 287.444700][ C1] #3: ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 287.453812][ C1] [ 287.453812][ C1] stack backtrace: [ 287.460007][ C1] CPU: 1 PID: 6898 Comm: syz-executor.3 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 287.469853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.479896][ C1] Call Trace: [ 287.483181][ C1] [ 287.486060][ C1] dump_stack+0x198/0x1fb [ 287.490415][ C1] mark_lock.cold+0x32/0x74 [ 287.494934][ C1] ? lock_downgrade+0x830/0x830 [ 287.499793][ C1] ? lock_chain_count+0x20/0x20 [ 287.504651][ C1] ? mark_lock+0xf7/0x2420 [ 287.509079][ C1] ? lock_chain_count+0x20/0x20 [ 287.513973][ C1] ? is_bpf_text_address+0xcb/0x160 [ 287.519175][ C1] ? kernel_text_address+0xbd/0xf0 [ 287.524420][ C1] ? __kernel_text_address+0x9/0x30 [ 287.529764][ C1] __lock_acquire+0x118a/0x56d0 [ 287.534851][ C1] ? lock_chain_count+0x20/0x20 [ 287.539781][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 287.546108][ C1] lock_acquire+0x1f2/0xaa0 [ 287.550611][ C1] ? xa_destroy+0xaa/0x350 [ 287.555026][ C1] ? lock_release+0x890/0x890 [ 287.559723][ C1] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 287.565102][ C1] _raw_spin_lock_irqsave+0x94/0xd0 [ 287.570295][ C1] ? xa_destroy+0xaa/0x350 [ 287.574716][ C1] xa_destroy+0xaa/0x350 [ 287.579021][ C1] ? xas_pause+0x3b0/0x3b0 [ 287.583578][ C1] ? lock_acquire+0x1f2/0xaa0 [ 287.588386][ C1] ? lock_release+0x890/0x890 [ 287.593146][ C1] ? free_obj_work+0x5b0/0x5b0 19:39:53 executing program 4: 19:39:53 executing program 3: 19:39:53 executing program 2: 19:39:53 executing program 0: [ 287.598105][ C1] __io_uring_free+0x60/0xc0 [ 287.602902][ C1] __put_task_struct+0xff/0x3f0 [ 287.607844][ C1] delayed_put_task_struct+0x1f6/0x340 [ 287.613311][ C1] rcu_core+0x645/0x1240 [ 287.617549][ C1] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 287.622566][ C1] ? mark_held_locks+0x9f/0xe0 [ 287.627335][ C1] ? lock_is_held_type+0xbb/0xf0 [ 287.632290][ C1] __do_softirq+0x203/0xab6 [ 287.636807][ C1] asm_call_irq_on_stack+0xf/0x20 [ 287.643822][ C1] [ 287.647070][ C1] do_softirq_own_stack+0x9b/0xd0 [ 287.652108][ C1] irq_exit_rcu+0x235/0x280 [ 287.656905][ C1] sysvec_apic_timer_interrupt+0x51/0xf0 [ 287.662855][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 287.668843][ C1] RIP: 0010:tomoyo_domain_quota_is_ok+0x32a/0x550 [ 287.675258][ C1] Code: 89 c6 e8 39 b2 ee fd 45 85 ff 74 09 e8 cf b5 ee fd 41 83 c5 01 e8 c6 b5 ee fd 8d 73 01 bf 10 00 00 00 83 c3 01 e8 d6 b1 ee fd <83> fb 10 75 bd e9 bf fd ff ff 41 bc 01 00 00 00 eb 91 45 31 e4 eb [ 287.695177][ C1] RSP: 0018:ffffc900059c78e8 EFLAGS: 00000293 [ 287.701254][ C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: ffffffff8386a52a [ 287.709699][ C1] RDX: 0000000000000008 RSI: ffff888064ae44c0 RDI: 0000000000000001 [ 287.717938][ C1] RBP: ffff888011741800 R08: 0000000000000001 R09: ffffffff8dc6a6e7 [ 287.726002][ C1] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000100 [ 287.734368][ C1] R13: 00000000000002f4 R14: dffffc0000000000 R15: 0000000000000000 [ 287.742346][ C1] ? tomoyo_domain_quota_is_ok+0x32a/0x550 [ 287.748324][ C1] ? tomoyo_domain_quota_is_ok+0x32a/0x550 [ 287.754292][ C1] tomoyo_supervisor+0x2f2/0xef0 [ 287.759314][ C1] ? tomoyo_profile+0x50/0x50 [ 287.763987][ C1] ? mark_held_locks+0x9f/0xe0 [ 287.768756][ C1] ? lock_is_held_type+0xbb/0xf0 [ 287.773702][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 287.779042][ C1] ? tomoyo_path_matches_pattern+0x110/0x280 [ 287.785148][ C1] ? tomoyo_check_path_acl+0x8b/0x1f0 [ 287.790599][ C1] ? tomoyo_same_mount_acl+0x450/0x450 [ 287.796051][ C1] tomoyo_path_permission+0x270/0x3a0 [ 287.801420][ C1] tomoyo_path_perm+0x2f0/0x400 [ 287.806359][ C1] ? tomoyo_check_open_permission+0x380/0x380 [ 287.812428][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 287.818503][ C1] ? find_held_lock+0x2d/0x110 [ 287.823281][ C1] ? __d_lookup+0x3ff/0x6f0 [ 287.827789][ C1] tomoyo_path_unlink+0x8e/0xd0 [ 287.832651][ C1] ? tomoyo_path_rmdir+0xd0/0xd0 [ 287.837694][ C1] security_path_unlink+0xd7/0x150 [ 287.842824][ C1] do_unlinkat+0x375/0x660 [ 287.847332][ C1] ? __ia32_sys_rmdir+0x100/0x100 [ 287.852353][ C1] ? strncpy_from_user+0x29e/0x3a0 [ 287.857459][ C1] do_syscall_64+0x2d/0x70 [ 287.861869][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.867756][ C1] RIP: 0033:0x45db77 [ 287.871663][ C1] Code: 00 66 90 b8 58 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.891791][ C1] RSP: 002b:00007fff26185888 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 287.900430][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045db77 [ 287.908527][ C1] RDX: 00007fff261858a0 RSI: 00007fff261858a0 RDI: 00007fff26185930 [ 287.916772][ C1] RBP: 0000000000000054 R08: 0000000000000000 R09: 000000000000000f [ 287.924930][ C1] R10: 000000000000000a R11: 0000000000000246 R12: 00007fff261869c0 [ 287.932892][ C1] R13: 0000000003645a60 R14: 0000000000000000 R15: 00007fff261869c0 19:39:54 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/179, 0xb3}], 0x1) 19:39:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10b382) r1 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000440)="81", 0x1}], 0x2, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d00) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x9, 0x4, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "659f40ffca4a78e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d489755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 19:39:54 executing program 0: 19:39:54 executing program 2: 19:39:54 executing program 4: 19:39:54 executing program 3: 19:39:54 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x0) 19:39:54 executing program 4: 19:39:54 executing program 3: 19:39:54 executing program 0: 19:39:54 executing program 2: 19:39:54 executing program 3: 19:39:54 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x0) 19:39:54 executing program 5: 19:39:54 executing program 2: 19:39:54 executing program 4: 19:39:54 executing program 3: 19:39:54 executing program 0: 19:39:54 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x0) 19:39:54 executing program 3: 19:39:55 executing program 4: 19:39:55 executing program 0: 19:39:55 executing program 2: 19:39:55 executing program 5: 19:39:55 executing program 3: 19:39:55 executing program 2: 19:39:55 executing program 1: r0 = io_uring_setup(0x3a7d, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) 19:39:55 executing program 0: 19:39:55 executing program 4: 19:39:55 executing program 5: 19:39:55 executing program 2: 19:39:55 executing program 0: 19:39:55 executing program 3: 19:39:55 executing program 1: 19:39:55 executing program 4: 19:39:55 executing program 5: 19:39:55 executing program 2: 19:39:55 executing program 3: 19:39:55 executing program 1: 19:39:55 executing program 0: 19:39:55 executing program 4: 19:39:55 executing program 5: 19:39:55 executing program 2: 19:39:55 executing program 3: 19:39:55 executing program 1: 19:39:55 executing program 0: 19:39:55 executing program 4: 19:39:55 executing program 5: 19:39:55 executing program 3: 19:39:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={0x0}}, 0x0) 19:39:55 executing program 0: 19:39:55 executing program 3: 19:39:55 executing program 1: 19:39:55 executing program 4: 19:39:55 executing program 5: 19:39:55 executing program 2: 19:39:55 executing program 3: 19:39:55 executing program 5: 19:39:55 executing program 1: 19:39:55 executing program 0: 19:39:55 executing program 4: 19:39:55 executing program 2: 19:39:55 executing program 3: 19:39:55 executing program 5: 19:39:55 executing program 2: 19:39:55 executing program 1: 19:39:55 executing program 0: 19:39:55 executing program 4: 19:39:55 executing program 3: 19:39:56 executing program 5: 19:39:56 executing program 2: 19:39:56 executing program 0: 19:39:56 executing program 1: 19:39:56 executing program 4: 19:39:56 executing program 4: 19:39:56 executing program 5: 19:39:56 executing program 3: 19:39:56 executing program 2: 19:39:56 executing program 1: 19:39:56 executing program 0: 19:39:56 executing program 0: 19:39:56 executing program 5: 19:39:56 executing program 4: 19:39:56 executing program 3: 19:39:56 executing program 2: 19:39:56 executing program 1: 19:39:56 executing program 4: 19:39:56 executing program 0: 19:39:56 executing program 2: 19:39:56 executing program 5: 19:39:56 executing program 3: 19:39:56 executing program 1: 19:39:56 executing program 0: 19:39:56 executing program 4: 19:39:56 executing program 5: 19:39:56 executing program 2: 19:39:56 executing program 3: 19:39:56 executing program 1: 19:39:56 executing program 4: 19:39:56 executing program 5: 19:39:56 executing program 0: 19:39:56 executing program 2: 19:39:56 executing program 3: 19:39:56 executing program 2: 19:39:56 executing program 0: 19:39:56 executing program 4: 19:39:56 executing program 5: 19:39:56 executing program 3: 19:39:56 executing program 1: 19:39:56 executing program 2: 19:39:56 executing program 3: 19:39:56 executing program 4: 19:39:56 executing program 1: 19:39:56 executing program 2: 19:39:56 executing program 0: 19:39:56 executing program 5: 19:39:56 executing program 0: 19:39:56 executing program 1: 19:39:56 executing program 3: 19:39:57 executing program 2: 19:39:57 executing program 4: 19:39:57 executing program 0: 19:39:57 executing program 5: 19:39:57 executing program 1: 19:39:57 executing program 3: 19:39:57 executing program 4: 19:39:57 executing program 0: 19:39:57 executing program 5: 19:39:57 executing program 2: 19:39:57 executing program 1: 19:39:57 executing program 3: 19:39:57 executing program 4: 19:39:57 executing program 5: 19:39:57 executing program 0: 19:39:57 executing program 2: 19:39:57 executing program 1: 19:39:57 executing program 0: 19:39:57 executing program 2: 19:39:57 executing program 4: 19:39:57 executing program 3: 19:39:57 executing program 5: 19:39:57 executing program 2: 19:39:57 executing program 1: 19:39:57 executing program 4: 19:39:57 executing program 5: 19:39:57 executing program 0: 19:39:57 executing program 3: 19:39:57 executing program 1: 19:39:57 executing program 2: 19:39:57 executing program 4: 19:39:57 executing program 0: 19:39:57 executing program 5: 19:39:57 executing program 3: 19:39:57 executing program 1: 19:39:57 executing program 4: 19:39:57 executing program 2: 19:39:57 executing program 0: 19:39:57 executing program 5: 19:39:57 executing program 3: 19:39:57 executing program 2: 19:39:57 executing program 1: 19:39:57 executing program 4: 19:39:57 executing program 0: 19:39:57 executing program 3: 19:39:57 executing program 4: 19:39:57 executing program 2: 19:39:57 executing program 5: 19:39:57 executing program 0: 19:39:57 executing program 1: 19:39:57 executing program 5: 19:39:57 executing program 2: 19:39:57 executing program 4: 19:39:57 executing program 3: 19:39:57 executing program 0: 19:39:57 executing program 1: 19:39:58 executing program 5: 19:39:58 executing program 2: 19:39:58 executing program 4: 19:39:58 executing program 0: 19:39:58 executing program 3: 19:39:58 executing program 1: 19:39:58 executing program 5: 19:39:58 executing program 4: 19:39:58 executing program 0: 19:39:58 executing program 2: 19:39:58 executing program 3: 19:39:58 executing program 5: 19:39:58 executing program 1: 19:39:58 executing program 0: 19:39:58 executing program 1: 19:39:58 executing program 2: 19:39:58 executing program 4: 19:39:58 executing program 5: 19:39:58 executing program 3: 19:39:58 executing program 0: 19:39:58 executing program 1: 19:39:58 executing program 2: 19:39:58 executing program 3: 19:39:58 executing program 4: 19:39:58 executing program 5: 19:39:58 executing program 4: 19:39:58 executing program 2: 19:39:58 executing program 1: 19:39:58 executing program 0: 19:39:58 executing program 3: 19:39:58 executing program 5: 19:39:58 executing program 4: 19:39:58 executing program 1: 19:39:58 executing program 2: 19:39:58 executing program 0: 19:39:58 executing program 4: 19:39:58 executing program 3: 19:39:58 executing program 5: 19:39:58 executing program 2: 19:39:58 executing program 1: 19:39:58 executing program 0: 19:39:58 executing program 3: 19:39:58 executing program 5: 19:39:58 executing program 4: 19:39:58 executing program 2: 19:39:58 executing program 0: 19:39:58 executing program 1: 19:39:58 executing program 5: 19:39:58 executing program 2: 19:39:58 executing program 4: 19:39:58 executing program 3: 19:39:58 executing program 0: 19:39:58 executing program 1: 19:39:58 executing program 5: 19:39:59 executing program 4: 19:39:59 executing program 0: 19:39:59 executing program 1: 19:39:59 executing program 2: 19:39:59 executing program 3: 19:39:59 executing program 5: 19:39:59 executing program 0: 19:39:59 executing program 1: 19:39:59 executing program 3: 19:39:59 executing program 4: 19:39:59 executing program 2: 19:39:59 executing program 5: 19:39:59 executing program 1: 19:39:59 executing program 4: 19:39:59 executing program 0: 19:39:59 executing program 5: 19:39:59 executing program 3: 19:39:59 executing program 2: 19:39:59 executing program 4: 19:39:59 executing program 0: 19:39:59 executing program 2: 19:39:59 executing program 1: 19:39:59 executing program 5: 19:39:59 executing program 3: 19:39:59 executing program 0: 19:39:59 executing program 1: 19:39:59 executing program 4: 19:39:59 executing program 3: 19:39:59 executing program 1: 19:39:59 executing program 2: 19:39:59 executing program 0: 19:39:59 executing program 5: 19:39:59 executing program 3: 19:39:59 executing program 2: 19:39:59 executing program 1: 19:39:59 executing program 4: 19:39:59 executing program 0: 19:39:59 executing program 3: 19:39:59 executing program 2: 19:39:59 executing program 5: 19:39:59 executing program 1: 19:39:59 executing program 4: 19:39:59 executing program 0: 19:39:59 executing program 1: 19:39:59 executing program 3: 19:39:59 executing program 2: 19:39:59 executing program 5: 19:39:59 executing program 4: 19:39:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:39:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 19:39:59 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001240)='ns/net\x00') fcntl$getflags(r0, 0x0) 19:39:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) 19:39:59 executing program 3: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4) 19:39:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4008040) 19:40:00 executing program 5: r0 = socket(0xa, 0x3, 0x9) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 19:40:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 19:40:00 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 19:40:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 19:40:00 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 19:40:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) 19:40:00 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$int_out(r0, 0x2, 0x0) 19:40:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x14) 19:40:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$CHAR_RAW_RESETZONE(r1, 0x40101283, 0x0) 19:40:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) r2 = dup2(r1, r0) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 19:40:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000001080)='./file0\x00', 0x1000001) 19:40:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 19:40:00 executing program 4: 19:40:00 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup3(r1, r0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) 19:40:00 executing program 1: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) getdents64(r0, 0x0, 0x0) 19:40:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 19:40:00 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80102, 0x0) 19:40:00 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x101941, 0x0) 19:40:00 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x8000, 0x0) 19:40:00 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 19:40:00 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40) 19:40:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 19:40:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, 0x0, 0x0) 19:40:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 19:40:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) 19:40:00 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 19:40:00 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xa42340, 0x126) 19:40:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000038c0), 0x0, 0x10061, 0x0) 19:40:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8000) 19:40:00 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xa0002, 0x180) 19:40:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='wchan\x00') r2 = dup2(r0, r1) r3 = dup2(r2, r1) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000080)=""/85) 19:40:00 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 19:40:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4040010) 19:40:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/153, 0x9e}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f0000000580)=""/12, 0xffffffffffffff01}, {&(0x7f0000000400)=""/217, 0xd9}], 0x5) 19:40:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 19:40:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200008c4) 19:40:00 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 19:40:00 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x60400, 0x0) 19:40:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 19:40:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) 19:40:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) 19:40:00 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) 19:40:01 executing program 5: symlinkat(&(0x7f0000000800)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) 19:40:01 executing program 1: r0 = socket(0x2, 0x3, 0x1ff) r1 = socket(0x2, 0x3, 0x1ff) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0) [ 294.746310][ T29] audit: type=1804 audit(1602186000.970:2): pid=9633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir006041541/syzkaller.lCM3YN/99/file0" dev="sda1" ino=15933 res=1 errno=0 19:40:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44) 19:40:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe0240, 0x79) 19:40:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) 19:40:01 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40041, 0x0) 19:40:01 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl(r0, 0x2, &(0x7f0000000040)) 19:40:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 19:40:01 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0) 19:40:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20dc) 19:40:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x44040) [ 294.981746][ T9652] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 19:40:01 executing program 5: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19:40:01 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r0, 0x0) write$apparmor_current(r0, 0x0, 0x0) 19:40:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x34}}, 0xc0) 19:40:01 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 19:40:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOCK(r0, 0x0, 0x0) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:01 executing program 0: timer_create(0x7, &(0x7f0000000000)={0x0, 0x1e}, &(0x7f0000000040)) 19:40:01 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 19:40:01 executing program 0: open$dir(&(0x7f0000001cc0)='./file0\x00', 0xda1c2, 0x0) r0 = getgid() chown(&(0x7f0000000040)='./file0\x00', 0x0, r0) 19:40:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe0240, 0x0) 19:40:01 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 19:40:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)) 19:40:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0xc) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:01 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 19:40:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 19:40:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 19:40:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4040010) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:01 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x300, 0x0) 19:40:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 19:40:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:40:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000008c0)=ANY=[], 0x480}}, 0x50) 19:40:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40000) 19:40:01 executing program 2: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x280) 19:40:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x40040d5) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:01 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001b80), 0x8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) write$char_raw(r0, 0x0, 0x0) 19:40:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 19:40:02 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x28c300, 0x0) 19:40:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x804) 19:40:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 19:40:02 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x60240, 0x0) fcntl$dupfd(r0, 0x0, r0) 19:40:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 19:40:02 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) 19:40:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:40:02 executing program 5: r0 = epoll_create(0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 19:40:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4040014) 19:40:02 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/urandom\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 19:40:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 19:40:02 executing program 2: r0 = socket(0x2, 0xa, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 19:40:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 4: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x5) 19:40:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) 19:40:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000c8) 19:40:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x4008000) 19:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000000) 19:40:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4004840) 19:40:02 executing program 0: creat(&(0x7f0000000300)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 19:40:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 19:40:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}) 19:40:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101041, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0xfffffffffffffd87, 0x0) 19:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 19:40:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f00000001c0)=""/185, 0xb9) [ 296.354952][ T29] audit: type=1804 audit(1602186002.580:3): pid=9788 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir853795547/syzkaller.vQ2ecy/118/file1" dev="sda1" ino=15938 res=1 errno=0 19:40:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x8810) 19:40:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={0x0}}, 0x0) 19:40:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}) 19:40:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fchownat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0xffffffffffffffff, 0x0) 19:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44) 19:40:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 19:40:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}) 19:40:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}) 19:40:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x44804) 19:40:03 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 19:40:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x4001) 19:40:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x24004014) 19:40:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680), 0x4) 19:40:03 executing program 3: futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x77359400}})