[ 89.215426][ T27] audit: type=1800 audit(1585959332.475:27): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 89.246344][ T27] audit: type=1800 audit(1585959332.505:28): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 90.147403][ T27] audit: type=1800 audit(1585959333.485:29): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 90.185348][ T27] audit: type=1800 audit(1585959333.485:30): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. 2020/04/04 00:15:45 fuzzer started 2020/04/04 00:15:47 dialing manager at 10.128.0.26:40407 2020/04/04 00:15:47 syscalls: 2996 2020/04/04 00:15:47 code coverage: enabled 2020/04/04 00:15:47 comparison tracing: enabled 2020/04/04 00:15:47 extra coverage: enabled 2020/04/04 00:15:47 setuid sandbox: enabled 2020/04/04 00:15:47 namespace sandbox: enabled 2020/04/04 00:15:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/04 00:15:47 fault injection: enabled 2020/04/04 00:15:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/04 00:15:47 net packet injection: enabled 2020/04/04 00:15:47 net device setup: enabled 2020/04/04 00:15:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/04 00:15:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:18:44 executing program 0: 00:18:44 executing program 1: syzkaller login: [ 281.678119][T10096] IPVS: ftp: loaded support on port[0] = 21 [ 281.841257][T10098] IPVS: ftp: loaded support on port[0] = 21 00:18:45 executing program 2: [ 281.888087][T10096] chnl_net:caif_netlink_parms(): no params data found [ 282.108712][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.126508][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.143721][T10096] device bridge_slave_0 entered promiscuous mode [ 282.170682][T10104] IPVS: ftp: loaded support on port[0] = 21 [ 282.201127][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.209132][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.217708][T10096] device bridge_slave_1 entered promiscuous mode 00:18:45 executing program 3: [ 282.292526][T10098] chnl_net:caif_netlink_parms(): no params data found [ 282.305089][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.330000][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.419114][T10096] team0: Port device team_slave_0 added [ 282.458574][T10096] team0: Port device team_slave_1 added [ 282.593064][T10109] IPVS: ftp: loaded support on port[0] = 21 [ 282.633384][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.642877][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.672872][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 00:18:46 executing program 4: [ 282.685317][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.692541][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.701256][T10098] device bridge_slave_0 entered promiscuous mode [ 282.742184][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.765798][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.805302][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.839982][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.875390][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.876549][T10098] device bridge_slave_1 entered promiscuous mode 00:18:46 executing program 5: [ 283.028070][T10096] device hsr_slave_0 entered promiscuous mode [ 283.075689][T10096] device hsr_slave_1 entered promiscuous mode [ 283.145457][T10104] chnl_net:caif_netlink_parms(): no params data found [ 283.157753][T10113] IPVS: ftp: loaded support on port[0] = 21 [ 283.183005][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.239878][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.289498][T10115] IPVS: ftp: loaded support on port[0] = 21 [ 283.343956][T10098] team0: Port device team_slave_0 added [ 283.384274][T10098] team0: Port device team_slave_1 added [ 283.466911][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.474104][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.501115][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.512976][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.522800][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.531506][T10104] device bridge_slave_0 entered promiscuous mode [ 283.567088][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.574118][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.602056][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.622113][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.632699][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.642048][T10104] device bridge_slave_1 entered promiscuous mode [ 283.760988][T10109] chnl_net:caif_netlink_parms(): no params data found [ 283.792026][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.849530][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.909294][T10098] device hsr_slave_0 entered promiscuous mode [ 283.965888][T10098] device hsr_slave_1 entered promiscuous mode [ 284.005523][T10098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.014923][T10098] Cannot create hsr debugfs directory [ 284.022297][T10096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.127466][T10096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.180467][T10096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.242992][T10096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.303921][T10104] team0: Port device team_slave_0 added [ 284.338943][T10113] chnl_net:caif_netlink_parms(): no params data found [ 284.359732][T10104] team0: Port device team_slave_1 added [ 284.450900][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.458564][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.467719][T10109] device bridge_slave_0 entered promiscuous mode [ 284.476575][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.485176][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.512833][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.526012][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.533192][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.559953][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.605991][T10109] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.615989][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.623823][T10109] device bridge_slave_1 entered promiscuous mode [ 284.739533][T10104] device hsr_slave_0 entered promiscuous mode [ 284.795871][T10104] device hsr_slave_1 entered promiscuous mode [ 284.835918][T10104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.843530][T10104] Cannot create hsr debugfs directory [ 284.909659][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.916956][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.924786][T10113] device bridge_slave_0 entered promiscuous mode [ 284.940744][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.959235][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.979823][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.987225][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.995053][T10113] device bridge_slave_1 entered promiscuous mode [ 285.021844][T10115] chnl_net:caif_netlink_parms(): no params data found [ 285.078504][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.107053][T10109] team0: Port device team_slave_0 added [ 285.127167][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.146081][T10109] team0: Port device team_slave_1 added [ 285.215452][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.222460][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.252508][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.266465][T10113] team0: Port device team_slave_0 added [ 285.297453][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.304463][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.337915][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.351451][T10113] team0: Port device team_slave_1 added [ 285.368211][T10098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.480460][T10098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.528207][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.538125][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.564992][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.603508][T10098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.659195][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.666339][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.693136][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.777701][T10113] device hsr_slave_0 entered promiscuous mode [ 285.835793][T10113] device hsr_slave_1 entered promiscuous mode [ 285.875390][T10113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.883001][T10113] Cannot create hsr debugfs directory [ 285.937687][T10109] device hsr_slave_0 entered promiscuous mode [ 285.986725][T10109] device hsr_slave_1 entered promiscuous mode [ 286.045507][T10109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.045548][T10109] Cannot create hsr debugfs directory [ 286.063035][T10098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.118371][T10115] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.126268][T10115] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.134409][T10115] device bridge_slave_0 entered promiscuous mode [ 286.184440][T10115] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.192182][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.200446][T10115] device bridge_slave_1 entered promiscuous mode [ 286.266591][T10115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.292304][T10115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.412095][T10115] team0: Port device team_slave_0 added [ 286.423643][T10104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.482753][T10104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.540423][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.568743][T10115] team0: Port device team_slave_1 added [ 286.576999][T10104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 286.678530][T10104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 286.757518][T10115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.764555][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.791237][T10115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.830132][T10115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.839278][T10115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.865900][T10115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.890087][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.899309][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.908199][T10109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.948494][T10109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.013133][T10109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.120656][T10115] device hsr_slave_0 entered promiscuous mode [ 287.166566][T10115] device hsr_slave_1 entered promiscuous mode [ 287.205592][T10115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.213239][T10115] Cannot create hsr debugfs directory [ 287.222416][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.237843][T10109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.365943][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.374842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.384334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.391759][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.401739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.449553][T10113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.508593][T10113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.573055][T10113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.628332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.637978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.646721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.653792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.692049][T10113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.740011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.800281][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.811500][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.821242][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.830094][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.857668][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.935988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.945147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.957247][T10115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.991907][T10115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.053159][T10115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.112779][T10115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.176735][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.184872][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.194316][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.203747][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.222109][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.258761][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.268089][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.276826][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.283979][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.292152][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.300728][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.309953][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.324576][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.360887][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.374278][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.384759][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.392022][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.419986][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.452424][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.470793][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.480077][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.489744][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.497804][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.549782][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.561270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.570166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.582834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.591728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.598873][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.607314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.616481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.624911][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.633788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.642286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.649428][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.658494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.666193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.674458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.682774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.726260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.734972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.746210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.762023][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.777460][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.799208][T10109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.806473][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.829363][T10098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.841333][T10098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.864140][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.887190][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.896715][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.905164][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.913934][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.922689][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.931214][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.940959][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.950346][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.002787][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.014851][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.024377][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.033026][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.040252][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.049854][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.060777][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.069977][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.077262][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.086476][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.095737][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.104869][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.114715][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.123564][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.132559][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.153896][T10109] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.181779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.191132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.200249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.209648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.220080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.239957][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.263390][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.275434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.286798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.294020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.302104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.311768][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.320969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.331028][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.340219][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.347351][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.388449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.397945][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.406268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.415132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.428843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.437539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.446376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.454728][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.463150][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.470641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.481823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.492033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.502444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.519103][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.551640][T10113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.564894][T10113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.585580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.596519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.608753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.622037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.632606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.641300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.650906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.659971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.669727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.678688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.689151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.698394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.727843][T10096] device veth0_vlan entered promiscuous mode [ 289.748834][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.758352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.770446][T10109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.804523][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.819031][T10096] device veth1_vlan entered promiscuous mode [ 289.879978][T10115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.892317][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.902416][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.913316][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.923373][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.933295][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.942905][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.954618][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.963212][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.017323][T10098] device veth0_vlan entered promiscuous mode [ 290.024596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.032804][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.043578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.053252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.082241][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.108779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.122103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.133460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.142064][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.150442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.159199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.183379][T10109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.195044][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.228673][T10098] device veth1_vlan entered promiscuous mode [ 290.241283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.260759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.274507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.284138][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.291864][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.320460][T10096] device veth0_macvtap entered promiscuous mode [ 290.339415][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.351843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.363973][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.375116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.384732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.391911][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.400622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.426573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.436576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.446573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.459255][T10096] device veth1_macvtap entered promiscuous mode [ 290.471376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.495395][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.504464][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.514959][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.524244][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.542588][T10104] device veth0_vlan entered promiscuous mode [ 290.567682][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.577062][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.586460][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.596427][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.607477][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.616661][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.646792][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.672192][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.683472][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.708191][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.728377][T10104] device veth1_vlan entered promiscuous mode [ 290.743021][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.752046][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.761784][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.773211][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.782353][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.791363][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.801000][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.822598][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.836674][T10109] device veth0_vlan entered promiscuous mode [ 290.856399][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.864625][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.873959][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.883302][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.893378][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.902637][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.913274][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.921782][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.946513][T10098] device veth0_macvtap entered promiscuous mode [ 290.964288][T10109] device veth1_vlan entered promiscuous mode [ 290.993394][T10098] device veth1_macvtap entered promiscuous mode [ 291.008881][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.099807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.110181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 291.122495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.134323][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.142967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.151325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.159866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.170679][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.178990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.207465][T10113] device veth0_vlan entered promiscuous mode [ 291.247706][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.263043][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.288618][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.299507][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.314837][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.326265][T10104] device veth0_macvtap entered promiscuous mode [ 291.367168][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.378344][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.387502][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.397888][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.407800][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.423891][T10109] device veth0_macvtap entered promiscuous mode [ 291.448634][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 291.461048][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.472425][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.482682][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.492998][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.502365][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.513222][T10113] device veth1_vlan entered promiscuous mode [ 291.527159][T10109] device veth1_macvtap entered promiscuous mode [ 291.546700][T10104] device veth1_macvtap entered promiscuous mode 00:18:55 executing program 0: lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="500300000020000008000000000000ac22000000000000012fb74be67002ed5f20cef11d33d76f739b2e9363000100000000001f0000e100000000000000000400000005"], 0x49) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) [ 291.662984][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.684777][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.696010][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.715855][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.743393][T10109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.776127][T10147] BFS-fs: bfs_fill_super(): Inode 0x00000009 corrupted on loop0 [ 291.808368][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.817925][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.827762][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.840578][T10149] BFS-fs: bfs_fill_super(): Inode 0x00000009 corrupted on loop0 [ 291.850525][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.880907][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.899282][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.909270][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.919897][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e0, 0x1f8, 0x4f0, 0x330, 0x400, 0x4f0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sendmail_exec_t:s0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r4) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x3) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000100)) close(r6) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x6d7, 0x4, 0x4, 0x2000, 0x3, {}, {0x4, 0x0, 0x0, 0x81, 0x2, 0x8, "f2d4c2e6"}, 0x8000, 0x4, @fd=r1, 0x9, 0x0, r5}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 291.929987][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 291.940816][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.952270][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.025969][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.047476][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.058238][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.093290][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.108656][T10109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.119675][T10109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.133996][T10109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.148440][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.160651][T10156] xt_SECMARK: invalid mode: 0 [ 292.170495][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.181490][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.193171][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.208335][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 292.220511][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.232069][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.257051][T10113] device veth0_macvtap entered promiscuous mode [ 292.271312][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.281903][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:18:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000002c0)={0x1, 0x6, 0x1, 'queue1\x00', 0x7}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) [ 292.302229][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.313986][T10160] xt_SECMARK: invalid mode: 0 [ 292.315044][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.334452][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.343842][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 00:18:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e0, 0x1f8, 0x4f0, 0x330, 0x400, 0x4f0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sendmail_exec_t:s0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r4) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x3) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000100)) close(r6) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x6d7, 0x4, 0x4, 0x2000, 0x3, {}, {0x4, 0x0, 0x0, 0x81, 0x2, 0x8, "f2d4c2e6"}, 0x8000, 0x4, @fd=r1, 0x9, 0x0, r5}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 292.389282][T10113] device veth1_macvtap entered promiscuous mode [ 292.400189][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.412235][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.421413][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.430554][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.445229][T10115] device veth0_vlan entered promiscuous mode [ 292.527864][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.548031][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.570909][T10167] xt_SECMARK: invalid mode: 0 00:18:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e0, 0x1f8, 0x4f0, 0x330, 0x400, 0x4f0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sendmail_exec_t:s0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r4) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x3) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000100)) close(r6) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x6d7, 0x4, 0x4, 0x2000, 0x3, {}, {0x4, 0x0, 0x0, 0x81, 0x2, 0x8, "f2d4c2e6"}, 0x8000, 0x4, @fd=r1, 0x9, 0x0, r5}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 292.635098][T10166] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 292.699416][T10115] device veth1_vlan entered promiscuous mode [ 292.730816][T10174] xt_SECMARK: invalid mode: 0 [ 292.731889][T10168] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 292.748644][T10168] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 292.814138][T10169] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 292.831006][T10169] bond1: (slave sit1): Error -95 calling set_mac_address [ 292.845846][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 00:18:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e0, 0x1f8, 0x4f0, 0x330, 0x400, 0x4f0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:sendmail_exec_t:s0\x00'}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r4) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x3) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000100)) close(r6) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x6d7, 0x4, 0x4, 0x2000, 0x3, {}, {0x4, 0x0, 0x0, 0x81, 0x2, 0x8, "f2d4c2e6"}, 0x8000, 0x4, @fd=r1, 0x9, 0x0, r5}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 292.857101][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.871853][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.883136][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.893619][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.904717][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.914847][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 292.926725][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.940987][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.995346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.004041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.024605][T10177] xt_SECMARK: invalid mode: 0 [ 293.083101][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 293.108628][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) personality(0x4100001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x130) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) r1 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) request_key(&(0x7f0000001480)='id_legacy\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)=':\x00', r1) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:18:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) [ 293.129126][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 293.140278][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.151132][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 293.162652][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.174151][T10113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 293.185292][T10113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.197859][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.268850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.282082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.315823][ C0] hrtimer: interrupt took 46071 ns [ 293.341088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.375897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.396048][T10166] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 293.414150][T10166] bond2 (uninitialized): Released all slaves 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x9a, r2, 0x200, 0x0, 0x20000000}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x1, &(0x7f0000000280)=ANY=[@ANYPTR], &(0x7f0000000000)='GPL\x00', 0x4, 0x1004, &(0x7f0000001200)=""/4100, 0x0, 0x0, [], r4, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:18:56 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r4, 0x411}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x134c, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1300, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0x75, 0x1, "0121d87ecdb665d086bd4c3f64a12d6271ec3502a67e88c43aa5f421f8f76d84aa0ae70f389d5c7c9e2492e7d68ee3cc88b6183a9a0bbc20a676cfde2d1c43fb560a55543856e5c027ff44214ea5289dc65c0632519e37a8679d8c89901f5a85f8e3e0ce2689a40ee86419db40e6ee5969"}, @NL80211_BAND_60GHZ={0xb1, 0x2, "7a21ff336a9fe46145d9b705107c15503df2ba06674e0f3e3f653c8a080a5d4dddffa368090437e9677ded3b70a6ef90adb383414c1e593f086a166766e1b7dd9a442b4aff159d2433b3f77bef9503f002408c181c707ead7f4b263166a1f6b64cbc0bbd6750790096316322fcb561d6a2a83b9cb5aa890207d974b21b3161b5ad540e32fbea1a9a99c2cfd92c779505bdc224cfba6393b6c55d81362ec8d69251423e13f35c068723d75e667f"}, @NL80211_BAND_60GHZ={0x4f, 0x2, "ac1f83128f0ad3087f82d5a64a5c4a7fa878ba008578f8720ac107e91c5c56c23f7896e3b5942b093de7ea888cae69732eb7a2af8f0942788224a533990f4f4a6647f6c3dc3755775d49ae"}, @NL80211_BAND_2GHZ={0xf2, 0x0, "e6ec3b3f77a18ba0149c9a5178b1850caa9761bb4678569a95279f182c2cdf9f2b0a730fc8d348392b4f355200d3040cea2a5f3e69b9d7258d82dd4406171de398ef3a8c24df95bc8fb22e00a3050bfc46f4252c64ebdfbad6ae2cbf5f3f2e67cabd6d956fc7158f733c79ca57ba5f3546fb3814ee2b0a4f75e7546e02451ad759ea58125e01fff8458b86b7293b856da4ed99638fde4c527822af32f69b45b8daa518954022efada4afd868ee2bcce53f0e10f3f312c29723776e87047acc3d9a42d2a02a39ede947c9df83ddb09757efeb903723a626ae06f1af1e9e4d2424c4f1d654b6b504870a9e4f59136b"}, @NL80211_BAND_2GHZ={0x15, 0x0, "00f5777a29a22ef7d4b4446b5e3e634886"}, @NL80211_BAND_5GHZ={0xe, 0x1, "4363fa8b8cc574cf07c7"}, @NL80211_BAND_6GHZ={0x5d, 0x3, "baf8ee806439c6da5d1251cdaad2eb0d5f3f2c7000eed13311d525da7a8bc986deba9e5f8d9c0985e4374c99a54b1626ec2d6a30f8247edd93f6e576764a2d60a822a339769b2a556a051bf0ef37ebff6ab11a4596b6d9fbad"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x1f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x43, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4d70}]}, 0x134c}, 0x1, 0x0, 0x0, 0x41}, 0x8) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xa, "ec"}], 0x18}}], 0x1, 0x0) [ 293.612293][T10184] input: syz0 as /devices/virtual/input/input5 [ 293.712081][T10115] device veth0_macvtap entered promiscuous mode [ 293.721233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.770573][T10115] device veth1_macvtap entered promiscuous mode [ 294.004077][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.022956][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.033754][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.048155][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.060640][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.071530][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.081934][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.093017][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.102970][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 294.113729][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.127069][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.138803][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.149352][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.164457][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.191040][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.204851][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.223022][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.233007][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.244368][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.254340][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.266097][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.276174][T10115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 294.288457][T10115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.300704][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.326673][ T2869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.335910][ T2869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:18:57 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1044, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='+lowerdir=.:file0']) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f070f0138baa000b80070efd1660a660f38801606000fe8c4660f7df20faadca1f3e7b80f008ed0", 0x28}], 0x1, 0x40, &(0x7f0000000200)=[@cr0={0x0, 0x40000024}], 0x1) fsync(r0) [ 294.491428][T10211] overlayfs: unrecognized mount option "+lowerdir=.:file0" or missing value 00:18:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) epoll_create1(0x0) eventfd2(0x1, 0x80001) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x3) splice(r3, 0x0, r4, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r6) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x7, 0x3, 0xfffffffa}}) splice(r5, 0x0, r6, 0x0, 0x100000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x80000) sendfile(r0, r1, 0x0, 0x1000002047ff) 00:18:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000002064483c33c03e4ff50a26c05000000000000000000000000000900020073797a32000000100500010007000000ed10000000000000050005000a0000000c00070868d6b9b12605da8dbaa02929cf000000040000000015000300686173683b69702c706fe38f4723e3dd7c7b7dbf594a6b3592c00d91e65613c80ff0264014274d60b1e7925fe14484e287134428da089332ff23eaa9186c5e6fc54bd6c09200c0245352f39272a8805972867795eb45b325ae5b8133d118ed1313830881db84e630641ace44555842fd006fe56c593bc4a891302c55"], 0x5c}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:18:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r2) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x3) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x800, 0x4d, 0x6, 0x2, 0xa, "eef156859f698d90cf490eb9549ca1a3c1b474"}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000030774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002811200001c0012000b0001006d616373656300e10b00020005000a00010000000a000540340000000500000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c4252401000000ffffffff67d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41559bfb87684800f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba3cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a1990899435308c959e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd000000fbffffff00000000000000f54e948eeebf0b1cd87b2774f4f22843fbe8d880a9e5f3fb0abfe5c4cb23d291c1160baec77ccd06dd5c04afca4076ee1e8ee6ba7116ad46c90b7e398a", @ANYRES32, @ANYBLOB="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"], 0x5}}, 0x20000000) 00:18:58 executing program 0: chdir(0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000007f, 0xa4126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17, 0x7}, 0x5008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="341b95de985e00004e", @ANYRES64, @ANYBLOB="000829bd7000fbdbdf250100000000000000014100000018021700000006155e1d084d181bdf84dd7d000000277564703a73797a3200000000"], 0x3}, 0x1, 0x0, 0x0, 0xc0}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r2, r3, 0x0, 0x1c500) 00:18:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) personality(0x4100001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x130) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) r1 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) request_key(&(0x7f0000001480)='id_legacy\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)=':\x00', r1) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:18:58 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) write$capi20_data(r3, &(0x7f0000000180)={{0x10, 0x2, 0x2, 0x82, 0x0, 0x8}, 0xc1, "7b8534ccf967bbdccf46776a48cf13794d94a7544342fc32934431c217965dd749f60c6b00117efaa6096bd7b8549ee8bf85021f8c6a128b7420aed2b63caba7524a8dce63a1f433fac4e4bf9e447a8383e4bd491bc2cb2e5be3c37dde122e43775a841d1710e87f80fabb6b08a859b13ffe441436cbe1ee50d41c41bbf13c6dfdbb8ddabe88166b92f692986866ce7db2b06bceec40d832cdd385dadf1aee0738a631784871f4a1420974c91e622902abdf25eab77cb00bbb920f5e5e86598273"}, 0xd3) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x53) 00:18:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000001c0)={r2}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@phonet, &(0x7f0000000180)=0x80, 0x40800) recvfrom$l2tp(r3, &(0x7f0000000280)=""/170, 0xaa, 0x100, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r2, 0x11}) [ 294.888891][ T27] audit: type=1804 audit(1585959538.215:31): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir988059359/syzkaller.T6IK7A/8/file0" dev="sda1" ino=16545 res=1 00:18:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r2) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x3) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x8000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) keyctl$describe(0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:18:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7c) set_mempolicy(0x1, &(0x7f0000000180)=0x1ff, 0x1000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8010) [ 295.076041][T10229] input: syz0 as /devices/virtual/input/input7 00:18:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7c) set_mempolicy(0x1, &(0x7f0000000180)=0x1ff, 0x1000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8010) 00:18:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) shutdown(r1, 0x0) mlockall(0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r3) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000000000), 0x4) munlockall() 00:18:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7c) set_mempolicy(0x1, &(0x7f0000000180)=0x1ff, 0x1000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8010) 00:18:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@loopback, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)=ANY=[@ANYBLOB="0104000018000000070000000000000002000000030000000504000002000000"]) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 00:18:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="24000000130007031dfffd946f6105000a0000040000000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) dup(r2) flock(r2, 0x9) r3 = socket$bt_rfcomm(0x1f, 0x2, 0x3) r4 = getpid() fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x4, 0xffff, 0x67c, r4}) 00:18:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7c) set_mempolicy(0x1, &(0x7f0000000180)=0x1ff, 0x1000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8010) 00:18:59 executing program 4: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x3) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="6082d1de", @ANYRES16=r4, @ANYBLOB="010f0004000090d9411016b93982005cd47e912e23bee2f31feb38daf1c5b41559740fb7b48e24755578d9cd"], 0x14}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000300)=0x4) socket$netlink(0x10, 0x3, 0x4) close(r1) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x3) splice(r5, 0x0, r6, 0x0, 0xfffffffc, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0xa10000, 0x3, 0x101, r6, 0x0, &(0x7f0000000240)={0x9b090e, 0x1, [], @string=&(0x7f00000001c0)=0x4c}}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf250a0000003c0001800c000700111000000f000000060001000a000000060004004e24000014000300ac1e000100000000000000000000000006000100020000000800060080000000300001801400030000000000000000000000000000000001060002000c000000070006007368000008000900590000000800060007000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x404a040) sync() [ 295.894937][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:59 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x141440, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x100000, r4, 0x9}) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 296.078057][ T27] audit: type=1804 audit(1585959539.415:32): pid=10291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir988059359/syzkaller.T6IK7A/10/file0" dev="sda1" ino=16551 res=1 00:18:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r2) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x3) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x7}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x76, &(0x7f00000000c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0xffffff00, @dev={0xfe, 0x80, [], 0x38}}}, 0x80000001, 0xffff, 0x7, 0xd5, 0x26, 0x4, 0xff}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x4c}}, 0x0) [ 296.347114][T10113] general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN [ 296.359059][T10113] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 296.367526][T10113] CPU: 1 PID: 10113 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 296.377418][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.387635][T10113] RIP: 0010:destroy_workqueue+0x2e/0x6b0 [ 296.393292][T10113] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 296.413399][T10113] RSP: 0018:ffffc90002247cc8 EFLAGS: 00010206 [ 296.419573][T10113] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 296.427566][T10113] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 296.436310][T10113] RBP: ffff8880a1a930f0 R08: ffff888057c54200 R09: fffffbfff185270a [ 296.445343][T10113] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a1a93000 [ 296.453693][T10113] R13: ffff8880a1a93004 R14: 0000000000000000 R15: 0000000000004c01 [ 296.461785][T10113] FS: 00000000016ec940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 296.470749][T10113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.477348][T10113] CR2: 0000000000c25008 CR3: 0000000057c1f000 CR4: 00000000001406e0 [ 296.485361][T10113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 00:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) shutdown(r1, 0x0) mlockall(0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r3) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x3) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000000000), 0x4) munlockall() [ 296.493345][T10113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.501328][T10113] Call Trace: [ 296.504712][T10113] __loop_clr_fd+0x185/0x1280 [ 296.509802][T10113] lo_ioctl+0x2b4/0x1460 [ 296.514108][T10113] ? __loop_clr_fd+0x1280/0x1280 [ 296.519254][T10113] blkdev_ioctl+0x25b/0x660 [ 296.523791][T10113] ? blkdev_common_ioctl+0x1770/0x1770 [ 296.529376][T10113] block_ioctl+0xe9/0x130 [ 296.534188][T10113] ? blkdev_fallocate+0x3f0/0x3f0 [ 296.539363][T10113] ksys_ioctl+0x11a/0x180 [ 296.543718][T10113] __x64_sys_ioctl+0x6f/0xb0 [ 296.548407][T10113] ? lockdep_hardirqs_on+0x417/0x5d0 [ 296.553856][T10113] do_syscall_64+0xf6/0x790 [ 296.558470][T10113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.564359][T10113] RIP: 0033:0x45c6b7 [ 296.568239][T10113] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.587954][T10113] RSP: 002b:00007ffebe8494d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.596370][T10113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045c6b7 [ 296.604488][T10113] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 296.613340][T10113] RBP: 000000000000000b R08: 0000000000000000 R09: 000000000000000a [ 296.621319][T10113] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 296.629539][T10113] R13: 00007ffebe849510 R14: 000000000004838e R15: 00007ffebe849520 [ 296.637540][T10113] Modules linked in: [ 296.641601][T10113] ---[ end trace d0118d4442e10c44 ]--- 00:19:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r5, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005480)=@delchain={0x24, 0x24, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r8, 0x800455d1, &(0x7f0000000140)) [ 296.647960][T10113] RIP: 0010:destroy_workqueue+0x2e/0x6b0 00:19:00 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) close(r1) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x3) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000180)=""/53, 0x35, &(0x7f0000000240)=""/83, 0x1, 0x4}}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x7) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x84, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1001a}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000380)={0xfffffff, 0x8c3, 0x7fff, r3, 0x0, &(0x7f0000000340)={0x990a2f, 0x6, [], @value64=0x6}}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000000000000a004e2400000003ff0200a475a5e955e2f7750000000001020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e20000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000001ff02000000000000000000000000000109000000fcffffff00"/400], 0x190) open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x28c0, 0x0) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000140)) [ 296.690517][ T27] audit: type=1804 audit(1585959540.025:33): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir988059359/syzkaller.T6IK7A/10/file0" dev="sda1" ino=16551 res=1 [ 296.696236][T10113] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 296.734959][T10113] RSP: 0018:ffffc90002247cc8 EFLAGS: 00010206 [ 296.745290][T10113] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 296.753697][T10113] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 296.763841][T10113] RBP: ffff8880a1a930f0 R08: ffff888057c54200 R09: fffffbfff185270a [ 296.774012][T10113] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a1a93000 [ 296.783929][T10113] R13: ffff8880a1a93004 R14: 0000000000000000 R15: 0000000000004c01 [ 296.791998][T10113] FS: 00000000016ec940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 296.801077][T10113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.807758][T10113] CR2: 00000000017e9978 CR3: 0000000057c1f000 CR4: 00000000001406f0 [ 296.815796][T10113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.823776][T10113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.832357][T10113] Kernel panic - not syncing: Fatal exception [ 296.839598][T10113] Kernel Offset: disabled [ 296.844632][T10113] Rebooting in 86400 seconds..