[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.402297][ T27] audit: type=1800 audit(1580782564.037:25): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.422025][ T27] audit: type=1800 audit(1580782564.037:26): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.449496][ T27] audit: type=1800 audit(1580782564.037:27): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. 2020/02/04 02:16:14 fuzzer started 2020/02/04 02:16:16 dialing manager at 10.128.0.26:40485 2020/02/04 02:16:16 syscalls: 2939 2020/02/04 02:16:16 code coverage: enabled 2020/02/04 02:16:16 comparison tracing: enabled 2020/02/04 02:16:16 extra coverage: enabled 2020/02/04 02:16:16 setuid sandbox: enabled 2020/02/04 02:16:16 namespace sandbox: enabled 2020/02/04 02:16:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/04 02:16:16 fault injection: enabled 2020/02/04 02:16:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/04 02:16:16 net packet injection: enabled 2020/02/04 02:16:16 net device setup: enabled 2020/02/04 02:16:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/04 02:16:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:19:00 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x5}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x5}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r0, &(0x7f0000000100)="c69b739bf45797e3d2d7ee252da89c60e5acdd7745755427d7377570a3d03260eec66aa286deae3d8050cc1cb8a0fd6f6692b60ad8da0b30f09f8811c1ec86ff2f29f0d324b8249e8ce36ce6444da3eb1671541344546af2074c09898ed32f8cfda48811060a71c2303d21f6aec430ee4d62628769d7aefb90b8ca3b299d3e48dac143879cf73aa86d38499d91983f945cd8de2928d3789328d47b2894733122bdad7c958aeac7db231b1e630a9fa538273b7045b5ab6dfbac14a6733652037e426b79de2e3f80fce05ee67ec639f76f9039447966f1bc69624afd20f8df5de3820e3eb719698bcac4624586ad1f877bd3b731f32cc1608e216b3f0c155e39b3c18997c5011a17fd4c4747d5893c2b5e8db5db062afa55380e0b8b965617dfe26c7efc31d779ec8f6323b63bdedbdd0ef9e750cd48a00175a21f68b499c16fbde4aab6462b7923bca14bc2cd385d798391d5021cbeb0a3bcc621e14c8320cd430f788915dd531e6fbdb067dae21c0e743390cc7fd3d9e41921a58e58c43914e0ef9752bebc790e0f5becfd1fbaa62f9a2ea354d5d8b7afe7a39fc37002b34c15dd3c33ff95873e0a581e60b9e9520c4e92e203fbcb09288c85782ecc3e2cf58402ce4bcd51480832a91be18045f2b42424b1d81f3ce1e718d09475be8f333c36cbfd229bae1dafce8bc9b450c7f61039edd4ead8929d13ef02b72c406a83b8701a58ff465975949b76d8c67f816874fa57ccffeee362a1c16ee0f60a84f6e166472ffb82c926e876f0525a948a949579f14eedb8e834191075cc51c69b6e3234dbace9b03841c36fbd17951a680eb7c943bb26799087a4c61ca34a3f9133fc401f0471f77456947694b4460ff41f80b3efecf0ce8a327bf6a732210bab147cfc3a9d32525d82176569eec147f9c1a97b72a5a12a98c7aaffafe3fdbf0c41a65ec31f76788efc563bcb0f8608bea69e6287314f7753ff7a465662a7ef8d18df09f31bf409053dcb58c9a76edd906f1a42e66555b4a4004498eb73570b1d843b8fe567397417768954501a310656cec8980faa264a6f26b1d8a206f248c4f818cde66a6975c35978370b211a36df10bbdfac8a9db5f1c67140b01c4bfcd284e7b766d0aa2e2d645f821f555ebc447c6672a08ba8627385904ac0ed735373e77818873005072173ffdd73ba52fee523ea06eb0da0157198d0e4dafc23aa79a2c27852db812794a784f00e6478d37cbc9189f6fb0b9cf1c98ea282204a9d26d402ec31ec1ec74877c2de195d6e00e6892375e48b6a7af25ef8b984d2a35b08687f8d2628eccda4bb844b4a72b0361c86c43734c53c352931b91c5dac5b09288beaaddb10472dca726f37f7bd3d890b9b8c1299bf9ac8e3ea57edfd58ff3317a54f0ada3924122db30f9f84e99311b24c1e6933393c112cc65d2cf4148b34baa3e4a5d542aabcd2ae300af603c0db9bd047abb0e966357eebe5fdaf3aee5963d494beadf757effef9f91a5c929c91ef87a90b693ef0e60f147d30179513edf081b2326fc227568022531b14753e3a49832166ec720997a4356302959ffbbd829d93045feb53f98a053446bda07ca513ed9c194552c9658a3569f3d0046efdca5d23d9b8f27dd4c2d93f7ef4dcb4d531bc4df43b1ea406fc618838ab6a23096e19beff22cd3ca3bcb5cdb5d11aec0c69bf32c3494ca17c544882a0ee94b1426918c6e43ca6bcb08bbda84ed0a4bb5029a93eda9acbdfd25f4568166a18c8e99e8898c7b0cc12f74afa50c1dcbf9ff8f5c020c2af7c63bdd9d7b2bf8382a89f5258abe189a9b2cb0d8202283c7a1d49db58066bd624b9febc4df4866c9df34ef47bd93ac7a4f36c724a44afa41e177ec87d177b2403abfcef4292e58db39eba162a168e72a2b2075c9869cd4a489c6abbb819c1dc960d977d31fbf62206bd0232625007d156e7ccf11d6c6e23b0d6dace3d7d3f8efca145c0fc45e562099d4f2afaa402e9f080f7c9eab889482fc1b37930d0c3646154f05a5224006c682f28bcaad5d4254025c67afb3efbf2fe69082c581faa0cc2e3ad3b8d9aa8b1f4c566ae2b38859ecb743524d938900567682dfffba2bddf4742ae7a195f2a6e1b41e2242c9570c6b892274a22248274d818af72c1fe7c521a46045642b4d593801aa860744e47eb9b4907785d23fc3134b8c426178fe0a7c5dfdbfdc79e5fd5978445d5c606e17b1e5184702b85eb44aa26ffe9808e72fa616cd756c9374107a4512e241887f2b44815d8b0ffe217ce21c55007349449c8afb4decebac55ee2d67d560d9f5dee048752e045ae3bf1fae3e259d27a0e00f1378c65b7d71b1ca8120939af62fc2a36e6ec9f3fb916a278ff9a8cd6d3050e40dad7900b461bcf1e5b1db1342c623f858cb8d413ae6e3975aba379abdd10c1462ed8cafbddfed49bedbbeba6c05d7e955fbb6db370d357492e9ad8534b447dd76730ff6b8dcc09957465328b22d45baf5c1c0588ba98540623f1739f7121d08e6bbf8f88d25acfec97e287c830c120498ebe03ba24f785ef808c8468933897938d189e50fbfe1191e27622ddecfbcb8664766a98a5156f0391e8aeee14a0a1ac5af0b1cad942ef030d93c48781473e3e0d59b6d2a68b1401a69c47ef45db376e1805efb063be669a76c117a8b2161df37a7ac260d0e301d9ff1f58ae130b3413be850e2d3934a88eed31d6d4acb4d5a5e5a3ffb0fc86c03ac091d2b7c7dd202ee1e3dce2d19ea45516bab0b7ed6278b1f3e2342975146618bac6d96a4eee3fd5932335060ea5914033add5dcfce5e1182dfbcae7684c228472c8892923ffec7b37a47b6af9563660e67dc4d3f84d2e6d585ffae9241614385727df635be538bc034d7658adbb05bc364bad1d74464611b431398ac7ce4dcd55a00fe0e8dacde32c3cfa9055cca97ab4e63aafa018d66308c33c77888b0379fa10751d7faada13c913f084f8cf838b45730ddb848467593f813ad3ee5bb6c81cbc068685fd9a598511b0f9867c1e941c4efcbc3d8cc6d3b81f7e4dd360f09a533be72e3892bee3d2557889ff30b9995e45f51eb4f486526442f63ab3247953b5ec1b57621faf3711bcfac8e73e8d648cefb5ea3fb9926844ba93dbc5e96cc51a67c1e54b362a2765d1b0eeeed3f73c9510d378c73df2c6287368e342009f74228d8050eafdd719a493b3a10284f5348eab78ec254e36d367d7e335809bce36fb735397d9078e0845e96a4104f3347055085c0cc59b6bc474d86125c6e631b05fb0f78b2e358c75ea7f2d17899b6a3b894147cf3d67702d9e9aef6a64ac15d7148d3a85f41ef03e93072fc944922177df2d9c98f2da59362fce9bab1d4cd6a67cb8127ffc5513d219ce0a0d2dbe484eaaa4853748a647291789ccd4f10c6b9e20a0b690f4d52054ec5670794ce5f2d3117518d42a041922593dee1d9e6f344a810c3409bf55a1e142160dcf7ca22886e67a739d9fa15dbc91c88fa054fc3f3300d3defac67728aa6e336bf79a2b83e386321074fc692aa5a2273281d2efadf65beebfe784fb50b14b37a1a218eb8e8ca6f9622d05c0a2bcbca343af27c3bfb6c560633fc9467c18b644b9b5d324f1e5f0ac2a40f951b881ea7912e0556a0cef362e73aafa0571fee8a9df70ca5826645e358cf3700f4eba70b4669664ab20dc03136a6ace2ae3a8d21a04e8c19a0dfc54d86033d3228c489d8ef153e059ca789fbe90f87d2a965d84a626486622090df22ad587c54367c8045259d1db7a8c9defb9846e1215897465111a21a09b8620855b4f57a8cb38281728cdf8054f5eece48693987e0418e2354ac1e6ed22fb79be8ee7b98d26afe0637ce9fc2a336b4542ed01f99b39fae3ce41c1151d72905c82fd901c878d4be0caec803f578bc5d61e6e614907ba4cfdfb1ab132b28b880b3c500d73dc0a4db4f3427154c7913e4478c150c44cb4f8b379b66c2bedb4274ba67a4ba3f95cafc1d24a207f9f40ea0b4db192767724791d539b6700b44ca7a2ff0aa73ae7edcb9972508d227069cd49f2df8577f14728f34e2356691a5adfae887bff90b905fd4b7fb65085848fd10870a870393a622bd13108cff54715c92081fbca5593e9ef0b36e5cbed2e97d369bde9b603bc52b85247326ae26d45b515df3689c1d58343280f557b7eceb6729badbfe143759809cc3046f2118b26c73e19801f8572d73b47b0d1f6df33c4c97831d10de40ea0f9c9af6d8916ba728115e9c825499fe262116d9b15b3218811b0fc398d84f1a7e137373a65cc24495ed64c36428b4e20dda63be93850a2e6d50a17715acdc97eeb8fca0111edf7f01825beec5eef66aa71897b0857c0272ce8271f8575111a21061df43e41bbaa2223703e5d268edfa2c91b45861c3af061430291bff22b35379e17d013f2a50dfef57342540c8a379304e59691d27e2cd910a40eebbbc9d6361db38f396c24a97575c1b59ae9698bf2e3164a44e925605304004ff4a6c55b04e8d8b41556954555fc319f4adc26130b0c2807aec8ce8d8e22b92949a157ecb82b1642143d3d19dbb3c7730df2b46602e1a75a219ad36b569e67fca9789cb00934c0edd7195d023cd1bba30758d3277669fe1b083f6591471071cf6d36375e2957c82287bdb64ea8a8960c4c9036502ad0f96004336b1c8335425de0cec090660213f1fdd025729e609499ff2ae7f3795e4f0cb4fd3b2162355a12bfe5fa29608d40cb3d1e7433b7896a25afa1fd9e6602d009757d994670f942de9fa62d482ca0c435f6b9cec5796c80539f32cf3683ec92594168b9374b436e359319593f30477e9b03bdbf325425b61f598eb42686f7effeafb80b649380c2734711618d041037b1b2449d7207f6040bf72e8eb2269e5b284237c6fe129eee1125c1cd6e3cfe5b4c5d17e3286c3caa3429d95a5ce904aacc9299c2cceae42370e3472c1691d313b02a17e1e834761f63c6ff0b86a0146aa6b9c448f4d5a68fa4590b1525dfc8b03086eaadab475cefa7582f0bbaa251661d9e058b6dc1435556ed9006ce5af600405316be91e4c14fc27c654198ccaeb2e4e8dc03e93c179265a7e43888ed420ebc96cbb8aea2781f23370885dc8c71fadce0f13ffc446885a3b23492a4809d390a6f41a1e2a4474678212bf44d25d3dbad6d465cb59b8384f1ad6cfc4d2213b7946b2f5faa4f70015a94837f03b1b9c386f2c4e5ec1b7b453b956ba9d52ca3eb2e406a632e8804bf1f99d5f103571f55beceec35feb60a87c3fe2364c5513e6e6e1be744c5f486e1421db0f961732195ed1edb44bd39114b95eff3b0907a9d93e339b6433742ac99be594dd21efaa71e57994f7835ed35c613098b5b106f78c980fc4e0a9df10745d981801e203208cf5ef954783bcd00863848b01bc4e5b8947a5bdb1f672188b76348a2f608b0015122da268114304bbdf93b19164bcc8c9b8afe45de40bbf7ba99bd7a0baff1eb5e16fbfb5cffbf13478d596f67ae3454948299973fe8a5db75d134e884bd7579fe3e3ddb5e2518e7a42647e1bb5a4f39c5d87e93b9fa162f1d841b956075ac71206c92a750c2dfaa83c1408eacdf91f28400a467f79d7585a0f5dd92090fd8fcad60abd9b0d328cae35fc6c71d1ea41b554c779db2ae6b365e26f6cd59e7b2e498b0d7d51f900862bb745b76f029a8f1bd98aade0e98e3ef30a524a3193687699b429b441bd6b80520e0cfbadbd62e3259d09c36c17f2bf141bd41973e81aecaa10bb8c24c1c3cdf186b9b4fee5b1e8d542c76dc7de4777735af12a20d05c88f", &(0x7f0000001100)=""/20}, 0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000001200)={0x9f0000, 0xc84, 0x5e10381d, r0, 0x0, &(0x7f00000011c0)={0x98091c, 0x2, [], @string=&(0x7f0000001180)=0x4d}}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001240)=0x9, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcs\x00', 0x181080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xb5}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000001400)=0x38000, 0x4) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000001440)) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000001480)=[{}], &(0x7f00000014c0)={0x77359400}, &(0x7f0000001540)={&(0x7f0000001500)={[0x2]}, 0x8}) r5 = open(&(0x7f0000001580)='./file0\x00', 0x40000, 0x168) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004011}, 0x28d679e0834e64cd) r6 = accept(r2, &(0x7f00000016c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001740)=0x80) getsockname$unix(r6, &(0x7f0000001780), &(0x7f0000001800)=0x6e) r7 = memfd_create(&(0x7f0000001840)='\x00', 0xb) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000001880)={{0x1, 0x0, @descriptor="45f80072d43cbf95"}}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000018c0)=0xdf4e) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001900)='/dev/vsock\x00', 0x80000, 0x0) mq_timedreceive(r8, &(0x7f0000001940)=""/4096, 0x1000, 0x7, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002940)=0x0) sched_rr_get_interval(r9, &(0x7f0000002980)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000002a00)={0x990000, 0x2471, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x9a091b, 0xe9f80fe, [], @ptr=0xa332}}) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000002a40)={r1, 0x5, 0x11, 0x7}, &(0x7f0000002a80)=0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002ac0)=0x2000, 0x4) r11 = accept(r3, &(0x7f0000002b00)=@nfc, &(0x7f0000002b80)=0x80) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002c00)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x3c, r12, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 02:19:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x6) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0x201) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)="69af281ede59fd9122728162fe2b5c41321cd1de3bb8f6873b5c400f26ee339b4c2ef455d4b500ca20ae5c6a2ea7cc216b254fa6e8e776eb4de17fc5c67bcdb0e6d2", 0x42) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x8, 0x800, {}, {0xee01}, 0x9, 0x81}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x200, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="466c80aafec3d400be9de941eefa1d3ce5b32a158db51d419593d11ddd8015b4d71c7582b100309235a0147b4744a51ae7c936bb784322ac431b920a9c05e32e7cb3b89fe988c47e78c02636e75dd36b0ca0bfce3d66dcb21af5192cd7b88cba83ff117f868df5fbb375cb0e24d22c458a542a4bb4ec5596a2e101f2bf01b755610289c63de0c7", 0x87, 0x7}, {&(0x7f0000000280)="dcb0df2a", 0x4, 0x24}], 0xc0420, &(0x7f0000000340)={[{@uni_xlateno='uni_xlate=0'}, {@shortname_mixed='shortname=mixed'}, {@rodir='rodir'}], [{@obj_type={'obj_type', 0x3d, '/dev/media#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nodevem0-'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}, {@obj_user={'obj_user', 0x3d, '/dev/media#\x00'}}, {@subj_role={'subj_role', 0x3d, 'vmnet0eth1'}}]}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1f) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xb5a, 0x1c1000) keyctl$session_to_parent(0x12) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xa2801, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000580)) syz_open_dev$sndmidi(&(0x7f00000005c0)='/dev/snd/midiC#D#\x00', 0xf4, 0x20c101) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000680)={0x7, 0x6, 0x4, 0x60040001, 0x101, {r4, r5/1000+10000}, {0x4, 0x1, 0xf5, 0x40, 0x6, 0x7f, "e3a7228c"}, 0x81, 0x4, @planes=&(0x7f0000000640)={0x8001, 0x0, @fd, 0xa3f9}, 0x2, 0x0, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x68) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000740)={0x980000, 0x8, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0xa20934, 0xff, [], @value64=0x12276b2a}}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000780)={r1}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x800, 0x0) ioctl$NBD_CLEAR_QUE(r9, 0xab05) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dsp1\x00', 0x2000, 0x0) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ashmem\x00', 0x204002, 0x0) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000880)="5b63a66c7008e329cf2b9c51c387ff1c949fdd18a42aa7208bfc771456ad765880d38a52fc23d4135e63b0b466d0e554302fd7ab9dd16f910d3a6e044c724b3ce260c77f9bfdea8c2e80b59cfc952e55c3e894ff5f4351e4882148882556dd9124d487681353546c5476116e81ad2c44c243a1f4f11e2711cbe2b0c79b924fbb8d818314a9e3f50ca2676901b6227dc22810e6973f684c2c67a68ef82221a58bb807223baee50a47a93921ba68a5db7a90d47c14a3b115b00ff9f7c3adb97d2974ddde171ffb0444aa7467e8380d4bd784bfcafed28fdac9208342373e8c2a7cb4d9120130d2918eb15f57e6bc41d7c50a95423919d4b2fe2e2569b2d0bea3d6") r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000980)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r11, 0xc0385650, &(0x7f00000009c0)={{0x2, @addr=0x3}, 0x8, 0x3, 0x1214}) prctl$PR_SET_FP_MODE(0x2d, 0x0) syzkaller login: [ 251.004451][ T9639] IPVS: ftp: loaded support on port[0] = 21 [ 251.211634][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 251.237988][ T9642] IPVS: ftp: loaded support on port[0] = 21 02:19:00 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x2da, "3bcc2e594ce841bec23a2b1c184c494b6d8cbe9317baba2c7d637a19080ec11f", 0x4, 0x8, 0x5, 0x63a7, 0x4, 0x2, 0x5, 0x4}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x5, 0x800}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) flistxattr(r1, &(0x7f0000000100)=""/147, 0x93) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={r3, r4}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @ipv4={[], [], @empty}, 0x8c}}, 0x24) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@rand_addr="7c356226de53e3b6818feb38058c6d46", 0xfff, 0x2, 0x2, 0x8, 0x8, 0xfe}, 0x20) getcwd(&(0x7f0000000340)=""/32, 0x20) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000380)=0x3) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video35\x00', 0x2, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x470101) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000440), 0x4) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x410000, 0x0) write$P9_RLERRORu(r6, &(0x7f00000004c0)={0x16, 0x7, 0x2, {{0x9, '/dev/bsg\x00'}, 0x3}}, 0x16) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000540)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x6000, 0x4000}]}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x405200, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, &(0x7f00000015c0)={0x81, &(0x7f00000005c0)="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"}) bind$ax25(0xffffffffffffffff, &(0x7f0000001600)={{0x3, @default, 0x5}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001700)}, {&(0x7f0000001740)=""/69, 0x45}, {&(0x7f00000017c0)=""/177, 0xb1}, {&(0x7f0000001880)=""/163, 0xa3}, {&(0x7f0000001940)=""/198, 0xc6}, {&(0x7f0000001a40)=""/183, 0xb7}, {&(0x7f0000001b00)=""/254, 0xfe}], 0x7, &(0x7f0000001c80)=""/4096, 0x1000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00)='nl80211\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002d40)={0x0, @empty, @local}, &(0x7f0000002d80)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'batadv_slave_1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000002ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x48, r10, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002f40)=0x0) ioctl$sock_SIOCSPGRP(r13, 0x8902, &(0x7f0000002f80)=r14) [ 251.387811][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.410234][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.418603][ T9639] device bridge_slave_0 entered promiscuous mode [ 251.445381][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.452630][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.460686][ T9639] device bridge_slave_1 entered promiscuous mode [ 251.478316][ T9646] IPVS: ftp: loaded support on port[0] = 21 [ 251.523589][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.558386][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.598734][ T9639] team0: Port device team_slave_0 added [ 251.623413][ T9639] team0: Port device team_slave_1 added [ 251.643566][ T9642] chnl_net:caif_netlink_parms(): no params data found 02:19:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x2) recvfrom$l2tp(r0, &(0x7f0000000040)=""/209, 0xd1, 0x2120, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000180)='./file0\x00', r1, r2, 0x800) r3 = socket$can_j1939(0x1d, 0x2, 0x7) splice(0xffffffffffffffff, &(0x7f00000003c0)=0x995, r3, &(0x7f0000000400)=0x2, 0xa0ae, 0xa) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8, 0x632400) fsync(r4) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000480)={0x35}) r5 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x81, 0x440842) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nvme-fabrics\x00', 0x450040, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000680)=0x20, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000740)="4debcc81dcbc92a2b377ae4998326af2fd7d6115362b59a8c6f336128900f973b127f69f3ccd846c26eea10d758bf526fe0d8cbb67f1b02bf3fd8df298475b7716ade59554100df746506ffab6850f05fdc55acfa9194516c26e25a96c76cdccb2f06cf9cab6972e", 0x68}, {&(0x7f00000007c0)="c9cdfaf5ce48bbbd8f43cd53a1c76c1f592185880d7cb7dd6923a3a0b001750d36142b61fe7a07791764d49655311f77e0e9483462f9570632b9636b0c9c0baf28f01ff9ccf59238f6eb8933aa5d77c3d37eecbc323f6604da01c869177cb2835502b4", 0x63}, {&(0x7f0000000840)="e04ba941591ef901badf549127254e3b70b5af86329a1979874088bbb765c4f7b2a0b6b820c88469a98e5baafd0c42a12077796bbf3ea7f71e63a648775626a056db1934aeeaf968550e044e41f39ef1553b218134c3acdc7ff74f1ecc3bbb3e23da2d1d133518349580aa347c30a95b519b950a", 0x74}], 0x3, 0x0, 0x0, 0xc005}, 0x4000001) chown(&(0x7f0000000940)='./file0\x00', r1, r2) finit_module(r3, &(0x7f0000000980)='\x00', 0x0) epoll_pwait(r0, &(0x7f00000009c0)=[{}, {}, {}], 0x3, 0x7fff, &(0x7f0000000a00)={[0x100]}, 0x8) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000a40)={0x6, 0x1, 0x4, 0x2000, 0x2, {0x0, 0x7530}, {0x2, 0x8, 0x8, 0xca, 0x6, 0x0, "b0aaf619"}, 0x100, 0x3, @offset=0x6, 0x9, 0x0, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b00)={0x30c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_EXP={0x1e8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x25}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_MASTER={0xd4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0xf}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, {0x8, 0x2, @rand_addr=0x101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_CT={0x50, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, @NFQA_CT={0xb4, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_LABELS_MASK={0x18, 0x17, [0xf86, 0x27ee, 0x22a6, 0x0, 0x10000]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x24040080}, 0x40000084) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_virtio(&(0x7f0000000ec0)='syz\x00', &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='9p\x00', 0x31cd404, &(0x7f0000000f80)={'trans=virtio,', {[{@uname={'uname'}}, {@access_uid={'access', 0x3d, 0xee00}}, {@cachetag={'cachetag'}}, {@version_u='version=9p2000.u'}, {@version_L='version=9p2000.L'}, {@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x400}}, {@version_9p2000='version=9p2000'}, {@access_uid={'access', 0x3d, 0xee00}}], [{@obj_role={'obj_role'}}]}}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dlm-control\x00', 0x10200, 0x0) ioctl$KVM_GET_FPU(r9, 0x81a0ae8c, &(0x7f0000001080)) ftruncate(0xffffffffffffffff, 0x86) r10 = dup(0xffffffffffffffff) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x24008831) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vga_arbiter\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r11, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x401108}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4000080) [ 251.702437][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.710859][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.750482][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.812765][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.822330][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.851412][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 02:19:01 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x7, 0x4) r2 = dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080)="60018efc094d2b85a1a65ce97b2401ee08669dce918b7c4833ec431f0dffd399846cdc3acb9125f9c2a3c1f3acdcbdb75d35321080849f68b381c388d66bfbf10d70b618da7bbaed480cf9d78ca200c32e39e9a6d60b9fd52f726fd0e30228b35ad6b849e752dd908fcb5a5d05445a9f2c6f2977b7", 0x75, r2}, 0x68) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000005c0)=""/64, 0x40}], 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffd}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r4 = gettid() r5 = fcntl$getown(r2, 0x9) r6 = inotify_init() kcmp(r4, r5, 0x5, r2, r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x204080, 0x0) ioctl$USBDEVFS_RESET(r7, 0x5514) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/net/pfkey\x00', 0x103, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000880)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002f40)={@initdev, 0x0}, &(0x7f0000002f80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003540)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000003680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003bc0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003cc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000003d00)={@rand_addr, 0x0}, &(0x7f0000003d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003f80)={@mcast1, 0x0}, &(0x7f0000003fc0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000004380)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004340)={&(0x7f0000004000)={0x318, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xb52}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x40811}, 0x48011) r17 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r17, 0x8983, &(0x7f0000005b80)={0x6, 'batadv_slave_1\x00', {0x5}, 0x5}) r18 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000005bc0)='/dev/dlm-monitor\x00', 0x600801, 0x0) ioctl$RTC_ALM_READ(r18, 0x80247008, &(0x7f0000005c00)) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000005c40)=@netrom={'nr', 0x0}, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x22) [ 251.992357][ T9639] device hsr_slave_0 entered promiscuous mode [ 252.069458][ T9639] device hsr_slave_1 entered promiscuous mode [ 252.133374][ T9651] IPVS: ftp: loaded support on port[0] = 21 [ 252.176552][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 252.221194][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.228282][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.238974][ T9642] device bridge_slave_0 entered promiscuous mode [ 252.269744][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.276894][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.285846][ T9642] device bridge_slave_1 entered promiscuous mode 02:19:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x200100) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x6, 0x2, 0x80, 0x7, 0x4, 0x8], &(0x7f0000000080)=[0x0], 0x6, 0x7}) io_setup(0x1, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r1, 0x3, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000240)={r2, r3+10000000}) timer_create(0x7, &(0x7f0000000400)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000280)="45912c873f3bfbc7511c2dcf6f90134b6a20cfe8c1dafbfdd698437f2e0fb365f938fc6ba903308598c3786204bd98d806dc4c76ecb4e61769b153aa9aecffcb532ffeffbcd82e31fd7387783a5a9064ac85", &(0x7f0000000300)="10c85f888f2010a42ee03e866ef130645fc5fbe3202161d926880fb65839af370c8e4ae7e72af9b8c6062e0886608ee2050a01bf4afb4884ffa9715da9a5f33e7e76a0a2c491a85d1705d6055d3266fe1b5f440dea40eb767ea0adb3ed65427edea1b2d16f8fa65ef29b5110d72f042dd241358f42176e167350ca3cc4375f973fe0703da8e7b50ecb49aab357c55cb11aeeaff95c09ddce35900692547bdd0cedfecb88eb8e466974c388cbae00c37c2253b20390c44e393e54e6b2abf63f845fc2bb4a5d76a6e4367d0314538d4ce59915e4f9a9"}}, &(0x7f0000000440)=0x0) timer_delete(r4) sendto$llc(0xffffffffffffffff, &(0x7f0000000480)="119e8fa913e0eb78a34a41dce6425eaa0edcf641953253295dea89be7c6eed56f4029769b8ffe2c98d4eeb4bfc953e9d3643d3b1b5b32f6ac443a9247367be01e89aa142030d9230595097e3b2d8391f128a22732b6102f0e809f882e4cc77182352b148516a5911fc056f022174645c44531244181f2cfda69088a7b83588f78d8caa43b9bd8d6b26035bb3abc8785093bbae1ae0ed08232782865fc4d87e1b5e456a50a34995557fe9bba9e0904fa35f84dd9b55d7abc329c8c600", 0xbc, 0x8000, &(0x7f0000000540)={0x1a, 0x3, 0x9, 0x9, 0x0, 0x0, @dev={[], 0x2b}}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-monitor\x00', 0xfa183, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f00000005c0)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780)='/dev/snapshot\x00', 0x40, 0x0) accept4$tipc(r6, &(0x7f00000007c0)=@id, &(0x7f0000000800)=0x10, 0x80800) r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000880)={0x0, 0x0, 0xed}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f00000008c0)={r9}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r10, 0x5381) ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f0000000940)={0x100, 0x8000, 0x200, 0x9}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000980)=@builtin='builtin_trusted\x00') r11 = accept$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x0, @multicast1}, &(0x7f0000000a00)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r11, 0x0, 0x42, &(0x7f0000000a40)={'icmp6\x00'}, &(0x7f0000000a80)=0x1e) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000ac0)={r9}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000b00)={r12, r8}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r10, 0x111, 0x5, 0x5, 0x4) ioctl$CAPI_CLR_FLAGS(r10, 0x80044325, &(0x7f0000000b40)) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendto$packet(r13, &(0x7f0000000bc0)="f02d7d2dc3cfcd045097c93d7b6f2c9b2260c1184546a6deb69a0a0e3eb68ed4d3cafc6b8a051aff58da7a71d9966e3b7e52debe0924b29231018dadae8aed8780b8f85492559493879d8709895e57ea81825ecb73d8f64bf0048b196c8d267a130f0151cff747ca8ed922d870d9376bded6d6a8561fa5fcca9a6ef368d9b43013212c4440c159fcdb5252a78659ba744ec8e6b1b452dc024163c09bb4f8dda356e653e14d468dbf35799bc34f25afcfa8c52305d2a2a3934b568ec2a8efd0398ec9c1ce65aef023660b", 0xca, 0x24004000, &(0x7f0000000cc0)={0x11, 0xc, 0x0, 0x1, 0x80, 0x6, @random="53e055ca2477"}, 0x14) getsockopt$ARPT_SO_GET_INFO(r11, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00'}, &(0x7f0000000d80)=0x44) [ 252.327256][ T9654] IPVS: ftp: loaded support on port[0] = 21 [ 252.419655][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.470680][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.534073][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.541476][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.551177][ T9646] device bridge_slave_0 entered promiscuous mode [ 252.563807][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.571942][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.579969][ T9646] device bridge_slave_1 entered promiscuous mode [ 252.602480][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.616839][ T9642] team0: Port device team_slave_0 added [ 252.628106][ T9642] team0: Port device team_slave_1 added [ 252.653125][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.690569][ T9658] IPVS: ftp: loaded support on port[0] = 21 [ 252.710546][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.717526][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.745330][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.785645][ T9646] team0: Port device team_slave_0 added [ 252.794937][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.802648][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.828613][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.839826][ T9651] chnl_net:caif_netlink_parms(): no params data found [ 252.864794][ T9639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.922379][ T9646] team0: Port device team_slave_1 added [ 252.928150][ T9639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.017094][ T9639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.111024][ T9642] device hsr_slave_0 entered promiscuous mode [ 253.159524][ T9642] device hsr_slave_1 entered promiscuous mode [ 253.199262][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.207050][ T9642] Cannot create hsr debugfs directory [ 253.248780][ T9639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.315153][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.324183][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.350317][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.384209][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.392075][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.399989][ T9651] device bridge_slave_0 entered promiscuous mode [ 253.407270][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 253.423758][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.430853][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.456838][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.531012][ T9646] device hsr_slave_0 entered promiscuous mode [ 253.579420][ T9646] device hsr_slave_1 entered promiscuous mode [ 253.649319][ T9646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.656951][ T9646] Cannot create hsr debugfs directory [ 253.662646][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.669911][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.677783][ T9651] device bridge_slave_1 entered promiscuous mode [ 253.718051][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.760249][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.815146][ T9651] team0: Port device team_slave_0 added [ 253.826354][ T9651] team0: Port device team_slave_1 added [ 253.902920][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.910163][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.918087][ T9654] device bridge_slave_0 entered promiscuous mode [ 253.947375][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.954650][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.964524][ T9654] device bridge_slave_1 entered promiscuous mode [ 253.974960][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.982270][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.008714][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.021480][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.028452][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.054396][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.075301][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 254.118369][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.222537][ T9651] device hsr_slave_0 entered promiscuous mode [ 254.269498][ T9651] device hsr_slave_1 entered promiscuous mode [ 254.339110][ T9651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.346683][ T9651] Cannot create hsr debugfs directory [ 254.353724][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.386141][ T9642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.445965][ T9642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.528973][ T9654] team0: Port device team_slave_0 added [ 254.559589][ T9642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.619388][ T9654] team0: Port device team_slave_1 added [ 254.643191][ T9642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.713423][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.720751][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.728417][ T9658] device bridge_slave_0 entered promiscuous mode [ 254.737289][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.744510][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.753222][ T9658] device bridge_slave_1 entered promiscuous mode [ 254.776148][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.785987][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.793867][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.820526][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.850911][ T9646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.912025][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.930106][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.937497][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.945289][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.972176][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.003367][ T9646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.071751][ T9646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.125481][ T9646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.221185][ T9654] device hsr_slave_0 entered promiscuous mode [ 255.249809][ T9654] device hsr_slave_1 entered promiscuous mode [ 255.289164][ T9654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.296767][ T9654] Cannot create hsr debugfs directory [ 255.342560][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.350881][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.371134][ T9658] team0: Port device team_slave_0 added [ 255.386248][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.406123][ T9658] team0: Port device team_slave_1 added [ 255.448728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.458197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.467020][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.474218][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.483327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.492391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.500796][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.507837][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.524201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.578613][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.590706][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.614860][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.622404][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.648520][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.661487][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.668450][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.694976][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.706894][ T9651] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.751571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.763619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.772164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.781345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.790276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.798518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.807243][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.832421][ T9651] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.881454][ T9651] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.937441][ T9639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.952915][ T9639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.962726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.974442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.987642][ T9651] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.102048][ T9658] device hsr_slave_0 entered promiscuous mode [ 256.149662][ T9658] device hsr_slave_1 entered promiscuous mode [ 256.189219][ T9658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.196819][ T9658] Cannot create hsr debugfs directory [ 256.227987][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.245360][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.252975][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.300604][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.314501][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.341311][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.349829][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.367577][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.398266][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.407957][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.416977][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.424083][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.432324][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.441137][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.452662][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.467835][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.497577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.506395][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.517461][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.524608][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.532843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.542054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.562459][ T9654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.621878][ T9654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.691966][ T9654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.734507][ T9654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.797390][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.806051][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.814602][ T2703] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.821701][ T2703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.831805][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.840563][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.849122][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.857436][ T2703] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.864525][ T2703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.872524][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.882006][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.946450][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.955673][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.966299][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.974741][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.983233][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.007637][ T9646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.022827][ T9646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.034962][ T9639] device veth0_vlan entered promiscuous mode [ 257.053239][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.064430][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.072246][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.080248][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.088735][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.097386][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.106367][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.114953][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.124180][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.132608][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.143925][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.168624][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.182580][ T9639] device veth1_vlan entered promiscuous mode [ 257.231331][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.240579][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.248499][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.258775][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.268387][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.288884][ T9642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.302362][ T9642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.331357][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.341927][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.351796][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.361620][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.370613][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.379181][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.387440][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.395687][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.404011][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.411650][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.433794][ T9651] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.454631][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.465862][ T9658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.521684][ T9658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.585294][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.599997][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.608611][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.617326][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.625048][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.659327][ T9658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.687054][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.697265][ T9639] device veth0_macvtap entered promiscuous mode [ 257.705484][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.714024][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.722854][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.731983][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.739114][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.746763][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.755756][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.764284][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.771387][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.779146][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.789951][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.811197][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.818112][ T9658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.907692][ T9639] device veth1_macvtap entered promiscuous mode [ 257.915332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.925257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.934229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.943433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.980282][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.993123][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.001853][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.013136][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.021624][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.033256][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.065554][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.077949][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.089889][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.103177][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.125767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.135477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.143953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.152496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.161350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.170576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.183199][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.210776][ T9646] device veth0_vlan entered promiscuous mode [ 258.226731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.234449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.242841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.251511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.260333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.268866][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.277636][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.284724][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.293073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.301722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.310226][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.317295][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.325126][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.337714][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.365427][ T9642] device veth0_vlan entered promiscuous mode [ 258.377396][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.389445][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.398103][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.407432][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.416144][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.426734][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.435119][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.443419][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.452160][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.475209][ T9646] device veth1_vlan entered promiscuous mode [ 258.492627][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.510211][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.523136][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.532612][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.542246][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.551241][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.567144][ T9642] device veth1_vlan entered promiscuous mode [ 258.648429][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.661711][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.670896][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.678883][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.688097][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.697115][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.706164][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.792148][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.805985][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.815830][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.825748][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.834383][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.843630][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.863778][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.886741][ T9646] device veth0_macvtap entered promiscuous mode [ 258.917768][ T9642] device veth0_macvtap entered promiscuous mode [ 258.931780][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.947938][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.956641][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.964804][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.973779][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.992151][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.011106][ T9646] device veth1_macvtap entered promiscuous mode 02:19:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) unshare(0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000200)) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) [ 259.029647][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.047189][ T9651] device veth0_vlan entered promiscuous mode [ 259.065512][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.082139][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.100855][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.121934][ T9642] device veth1_macvtap entered promiscuous mode [ 259.147927][ T9651] device veth1_vlan entered promiscuous mode [ 259.157017][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.170099][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.177813][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.185831][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.194093][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.202783][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.212405][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.219539][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.254697][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.263739][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.272272][ C0] hrtimer: interrupt took 28577 ns [ 259.278074][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.287026][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.294132][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.313740][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.325003][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:19:09 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r1) [ 259.354054][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.377976][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.403811][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.415206][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.425846][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.437201][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.447927][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.456347][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.465560][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.473614][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.481399][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.490957][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.499840][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.508343][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.525701][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.536636][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.548008][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.560931][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.589816][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.601756][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.611667][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 259.622906][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.634105][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.648396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.658375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.667905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.677673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.688553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:19:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 259.715374][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.724347][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.742063][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.777218][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.802047][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.811409][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.820583][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 02:19:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r3) [ 259.873136][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.888971][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.899893][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.910136][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.921472][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.024022][ T9651] device veth0_macvtap entered promiscuous mode [ 260.128669][ T9651] device veth1_macvtap entered promiscuous mode 02:19:09 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x104c82, 0x0) [ 260.169930][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.178081][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.217084][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.257117][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.267503][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.287317][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.304780][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 02:19:10 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) 02:19:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e977a885887298fb82f24186cf2b", @ANYRES32=r2, @ANYBLOB="00000001f1ffffff0000000008000100687462001c00020018000200030000001afaffffff0000000000"], 0x48}}, 0x0) [ 260.406866][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.445721][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.489071][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.499613][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.527493][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.541003][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.552918][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.568077][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.577530][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.600744][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.610384][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.619426][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.627428][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.657580][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.674638][ T9715] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.683574][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.712236][ T9715] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 260.740255][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.758186][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.784340][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.797684][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.809731][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.822709][ T9654] device veth0_vlan entered promiscuous mode [ 260.837510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.856138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:19:10 executing program 1: r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x3800) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000540)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'], 0x0) 02:19:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) [ 260.986433][ T9654] device veth1_vlan entered promiscuous mode [ 261.086454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.097921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.243809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.255827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.298306][ T9658] device veth0_vlan entered promiscuous mode [ 261.325793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 02:19:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r3) setregid(0x0, r3) [ 261.351399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.364481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.374820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.398828][ T9654] device veth0_macvtap entered promiscuous mode [ 261.457196][ T9658] device veth1_vlan entered promiscuous mode [ 261.488389][ T9654] device veth1_macvtap entered promiscuous mode [ 261.586368][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.598815][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.619106][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.636799][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.647075][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.659108][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.668986][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.679536][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.694188][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.705267][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.714476][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.722975][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.732754][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.741094][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.750269][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.762577][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.776929][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.787079][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.801165][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.814294][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.825773][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.836048][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.846594][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.857958][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.866544][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.878061][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.886922][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.896525][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.908443][ T9658] device veth0_macvtap entered promiscuous mode [ 262.025525][ T9658] device veth1_macvtap entered promiscuous mode [ 262.068225][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.079820][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.090081][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.100891][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.110809][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.121318][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.131272][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.141823][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.151706][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 262.163476][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.174899][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.185026][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.193839][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.202670][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.214827][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.226053][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.236150][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.280586][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.292007][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.302959][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.312995][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.323687][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.333590][ T9658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 262.344260][ T9658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.356269][ T9658] batman_adv: batadv0: Interface activated: batadv_slave_1 02:19:12 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x2, 0x3, 0x420, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac], 0x0, 0x2a0, 0x2d0, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @bytecode={0x0, 0x3, 0x0, [{}, {}, {0x6}]}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x86f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) [ 262.379695][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.391525][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.485377][ T9770] Cannot find add_set index 0 as target 02:19:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffec4}, 0x48) 02:19:13 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x17) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000004c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000000) 02:19:13 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x2, 0x3, 0x420, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac], 0x0, 0x2a0, 0x2d0, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @bytecode={0x0, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x86f) 02:19:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x3b) 02:19:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$unix(r2, 0x0, 0x0) 02:19:13 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x2, 0x3, 0x420, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac], 0x0, 0x2a0, 0x2d0, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @bytecode={0x0, 0x3, 0x0, [{}, {}, {0x6}]}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x86f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) [ 263.647480][ T9787] xt_bpf: check failed: parse error 02:19:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a6e65742c6e65740000000005000400000000000900020073797a31000000000c000780080006400000000005000500020000000500010007000000"], 0x58}, 0x3}, 0x0) 02:19:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) [ 263.677532][ T9793] Cannot find add_set index 0 as target [ 263.684979][ T9797] xt_bpf: check failed: parse error 02:19:13 executing program 4: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0xd}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3c}}, 0x0) [ 263.756487][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 263.756502][ T27] audit: type=1804 audit(1580782753.387:31): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842959530/syzkaller.u0E4XD/2/bus" dev="sda1" ino=16550 res=1 02:19:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0xd}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) 02:19:13 executing program 5: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x301000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x20004891) pipe(&(0x7f00000002c0)) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 02:19:13 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xe8, 0xe8, 0x0, 0x0, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'bridge0\x00', 'veth1_to_hsr\x00', {}, {}, 0x84}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x1, 0x2, 0x52, 0x7, 0x81, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f, 0x33]}, 0x3c) r3 = memfd_create(&(0x7f00000002c0)='systemem\xc9\xe0\xf4\x88sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r4 = socket(0x200000000000011, 0x3, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r4, 0x0}]) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) 02:19:13 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x7c}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:13 executing program 4: tkill(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0xd}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r8, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 263.925380][ T27] audit: type=1804 audit(1580782753.437:32): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir842959530/syzkaller.u0E4XD/2/bus" dev="sda1" ino=16550 res=1 02:19:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f0000000100)=0x20000000000002, 0x4) sendmmsg$inet6(r0, &(0x7f0000009680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 264.110798][ T9833] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 02:19:13 executing program 3: unshare(0x40000000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x54}}, 0x0) 02:19:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0xffffffffffffffdb) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0xd1042, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r2, &(0x7f0000000040)) ftruncate(r2, 0x7e) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001580)=0xffffffff, 0x4) sendfile(r5, r6, &(0x7f0000000180)=0xfffffffffffffff8, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r12, 0x81fd) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000004c0)={'gretap0\x00', 0x4000}) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 02:19:13 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="edbfd8bbf53a27b18901adfe416832c351eabcf0ac8ff05a9f88500d13b86c55218642d77fd5ee8199edde0b4d5e6a9228a46df80a20ed15fe958ad2538cf3dc88e38cba2585f0955ed60974006c1ff15d5cc8abb227bfba3f7b"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="70424f9b247a0b73c1d22554", 0xc}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 02:19:14 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:14 executing program 1: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 264.496944][ T9851] IPVS: ftp: loaded support on port[0] = 21 [ 264.558372][ T9859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:19:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5001000024000705000001010000000000000000", @ANYRES32, @ANYBLOB="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"], 0x150}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 02:19:14 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 264.750535][ T9851] IPVS: ftp: loaded support on port[0] = 21 02:19:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) 02:19:14 executing program 2: r0 = io_uring_setup(0x64, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x9, 0x0, 0x2) 02:19:14 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0xffffffffffffffdb) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0xd1042, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r2, &(0x7f0000000040)) ftruncate(r2, 0x7e) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001580)=0xffffffff, 0x4) sendfile(r5, r6, &(0x7f0000000180)=0xfffffffffffffff8, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r12, 0x81fd) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000004c0)={'gretap0\x00', 0x4000}) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 02:19:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 02:19:14 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48}, 0x0) 02:19:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:19:14 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 265.319292][ T22] tipc: TX() has been purged, node left! [ 265.378512][ T9905] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:19:15 executing program 1: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x301000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000300), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 265.472024][ T9908] rdma_op 00000000ec580540 conn xmit_rdma 000000008166ad56 02:19:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0xffffffffffffffdb) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0xd1042, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r2, &(0x7f0000000040)) ftruncate(r2, 0x7e) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001580)=0xffffffff, 0x4) sendfile(r5, r6, &(0x7f0000000180)=0xfffffffffffffff8, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r12, 0x81fd) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000004c0)={'gretap0\x00', 0x4000}) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) [ 265.517226][ T9914] rdma_op 00000000becd4bed conn xmit_rdma 000000008166ad56 02:19:15 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:15 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/vhci\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48}, 0x0) 02:19:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x90040) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) [ 265.781423][ T9926] rdma_op 00000000e4531802 conn xmit_rdma 000000008166ad56 02:19:15 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0xffffffffffffffdb) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0xd1042, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r2, &(0x7f0000000040)) ftruncate(r2, 0x7e) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000001580)=0xffffffff, 0x4) sendfile(r5, r6, &(0x7f0000000180)=0xfffffffffffffff8, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r12, 0x81fd) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000004c0)={'gretap0\x00', 0x4000}) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 02:19:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) connect$inet6(r2, &(0x7f0000000340), 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1f88b2c526f16902", "52a8f3c9edd18e459572f1c59d2a86e8f5088c6b3768c865c20f00", "b640dfba", "907291487b859891"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000003, 0x0) 02:19:15 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:19:15 executing program 2: r0 = io_uring_setup(0x64, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x2, 0x0, 0x2) [ 266.540509][ T9955] ------------[ cut here ]------------ [ 266.546105][ T9955] ODEBUG: free active (active state 0) object type: work_struct hint: io_ring_file_ref_switch+0x0/0xac0 [ 266.557718][ T9955] WARNING: CPU: 0 PID: 9955 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 266.567199][ T9955] Kernel panic - not syncing: panic_on_warn set ... [ 266.573794][ T9955] CPU: 0 PID: 9955 Comm: syz-executor.2 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 266.583812][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.593869][ T9955] Call Trace: [ 266.597303][ T9955] dump_stack+0x197/0x210 [ 266.601648][ T9955] ? debug_print_object+0x100/0x250 [ 266.606920][ T9955] panic+0x2e3/0x75c [ 266.610820][ T9955] ? add_taint.cold+0x16/0x16 [ 266.615574][ T9955] ? __kasan_check_write+0x14/0x20 [ 266.620691][ T9955] ? __warn.cold+0x14/0x3e [ 266.625117][ T9955] ? __warn+0xd9/0x1cf [ 266.629195][ T9955] ? debug_print_object+0x168/0x250 [ 266.634404][ T9955] __warn.cold+0x2f/0x3e [ 266.638645][ T9955] ? debug_print_object+0x168/0x250 [ 266.643843][ T9955] report_bug+0x289/0x300 [ 266.648264][ T9955] do_error_trap+0x11b/0x200 [ 266.652983][ T9955] do_invalid_op+0x37/0x50 [ 266.657397][ T9955] ? debug_print_object+0x168/0x250 [ 266.662665][ T9955] invalid_op+0x23/0x30 [ 266.666814][ T9955] RIP: 0010:debug_print_object+0x168/0x250 [ 266.672618][ T9955] Code: dd 00 d4 91 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 00 d4 91 88 48 c7 c7 60 c9 91 88 e8 57 9c a1 fd <0f> 0b 83 05 e3 13 01 07 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 266.692222][ T9955] RSP: 0018:ffffc90005377c30 EFLAGS: 00010082 [ 266.698413][ T9955] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 266.706397][ T9955] RDX: 0000000000000000 RSI: ffffffff815eb7c6 RDI: fffff52000a6ef78 [ 266.714369][ T9955] RBP: ffffc90005377c70 R08: ffff8880535ea180 R09: ffffed1015d045c9 [ 266.722331][ T9955] R10: ffffed1015d045c8 R11: ffff8880ae822e43 R12: 0000000000000001 [ 266.730300][ T9955] R13: ffffffff89b7e460 R14: ffffffff814c81f0 R15: ffff8880948afb28 [ 266.738339][ T9955] ? __exit_umh+0x2e0/0x2e0 [ 266.742896][ T9955] ? vprintk_func+0x86/0x189 [ 266.747483][ T9955] debug_check_no_obj_freed+0x2d4/0x43f [ 266.753177][ T9955] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 266.758745][ T9955] kfree+0xf8/0x2c0 [ 266.762553][ T9955] io_sqe_files_unregister+0x3b1/0x6c0 [ 266.768023][ T9955] io_ring_ctx_wait_and_kill+0x430/0x9a0 [ 266.773724][ T9955] ? __sanitizer_cov_trace_cmp8+0x10/0x20 [ 266.779453][ T9955] io_uring_release+0x42/0x50 [ 266.784188][ T9955] __fput+0x2ff/0x890 [ 266.788164][ T9955] ? io_ring_ctx_wait_and_kill+0x9a0/0x9a0 [ 266.793963][ T9955] ____fput+0x16/0x20 [ 266.798000][ T9955] task_work_run+0x145/0x1c0 [ 266.802658][ T9955] exit_to_usermode_loop+0x316/0x380 [ 266.807953][ T9955] do_syscall_64+0x676/0x790 [ 266.812547][ T9955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.818441][ T9955] RIP: 0033:0x414f31 [ 266.822535][ T9955] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 266.842252][ T9955] RSP: 002b:00007fff48b41f40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 266.850658][ T9955] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000414f31 [ 266.858758][ T9955] RDX: 0000001b2e920000 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.866737][ T9955] RBP: 0000000000000001 R08: 00000000f7cdcd26 R09: 00000000f7cdcd2a [ 266.874731][ T9955] R10: 00007fff48b42020 R11: 0000000000000293 R12: 000000000075c9a0 [ 266.882711][ T9955] R13: 000000000075c9a0 R14: 00000000007605f8 R15: 000000000075bf2c [ 266.892203][ T9955] Kernel Offset: disabled [ 266.896672][ T9955] Rebooting in 86400 seconds..