[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.23' (ECDSA) to the list of known hosts. 2020/09/14 04:54:59 fuzzer started 2020/09/14 04:54:59 dialing manager at 10.128.0.105:44213 2020/09/14 04:55:04 syscalls: 3334 2020/09/14 04:55:04 code coverage: enabled 2020/09/14 04:55:04 comparison tracing: enabled 2020/09/14 04:55:04 extra coverage: enabled 2020/09/14 04:55:04 setuid sandbox: enabled 2020/09/14 04:55:04 namespace sandbox: enabled 2020/09/14 04:55:04 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/14 04:55:04 fault injection: enabled 2020/09/14 04:55:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/14 04:55:04 net packet injection: enabled 2020/09/14 04:55:04 net device setup: enabled 2020/09/14 04:55:04 concurrency sanitizer: enabled 2020/09/14 04:55:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/14 04:55:04 USB emulation: enabled 2020/09/14 04:55:04 hci packet injection: enabled 2020/09/14 04:55:08 suppressing KCSAN reports in functions: 'blk_mq_dispatch_rq_list' 'n_tty_receive_buf_common' 'n_tty_receive_char_special' '__delete_from_page_cache' 'shmem_unlink' '__mark_inode_dirty' '__io_cqring_fill_event' 'generic_write_end' 'ext4_da_write_end' 'ext4_set_iomap' 'xas_clear_mark' 'ext4_free_inodes_count' '__ext4_update_other_inode_time' 'kauditd_thread' '__xa_clear_mark' 'do_nanosleep' 'io_sq_thread' 'futex_wait_queue_me' 'snd_rawmidi_poll' 'ext4_handle_inode_extension' '__mod_timer' 'ext4_writepages' 'do_select' '__send_signal' 'blk_mq_sched_dispatch_requests' 'find_get_pages_range_tag' 'do_signal_stop' 'pcpu_alloc' 'dd_has_work' 'do_syslog' 'snd_rawmidi_kernel_write1' 'blk_mq_rq_ctx_init' 'wg_packet_decrypt_worker' 'alloc_pid' 'wbt_issue' 'generic_file_buffered_read' 'ext4_mb_regular_allocator' '__ext4_new_inode' 'do_sys_poll' '__add_to_page_cache_locked' 'snd_rawmidi_transmit' 'ext4_free_inode' 'ext4_mark_iloc_dirty' 04:55:47 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) 04:55:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000508005a80648c63940d0324fc6010000a4002000000051a82c137153e670902088003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:55:48 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x4, [@union, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "7f"}, @struct, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x50}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:55:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x7}]}}, &(0x7f0000000300)=""/250, 0x32, 0xfa, 0x8}, 0x20) 04:55:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b5eed4af01db22b7c134010000007a15", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="ec3b7142da4c0dd31fdac4", 0xb}, {&(0x7f00000007c0)="3bbb7d6dc65c467cf0d7667b683b7d1a652c2cd7d8d9243acfee6196ee02ecd9a92070d4086b1b9df146f65911f35e26df596d751f4e2bc215305b4634be31c5d4016817fa7f75b1cd7d3b877712557209426a501afdb1deef686ff42eca303d1f60c9c7fa454cecac41e6466ab42700"/126, 0x7e}, {&(0x7f0000000500)="17b86b1642781adc471f12c1f661d46e29bd577c58f3573757a53743a7cf761b403fce830f7985fad9ba495f7675beeb7b679c14e7679e07780a6ce7bdaa4f291ca63af4cef3f2b5a104dc30b5c17349f08b2d5076962007a07bc961878c2ba70f9d4e9cd380d71f4cb93b16424a05ed44f17d30e636b6b1bda4adc3704a61e8d0d0eed9569804", 0x87}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}, 0x0) read$alg(r1, &(0x7f0000002480)=""/4110, 0x100e) 04:55:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) syzkaller login: [ 81.702041][ T8727] IPVS: ftp: loaded support on port[0] = 21 [ 81.786776][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 81.818476][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.825764][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.833285][ T8727] device bridge_slave_0 entered promiscuous mode [ 81.849237][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.856677][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.864458][ T8727] device bridge_slave_1 entered promiscuous mode [ 81.888050][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.889584][ T8729] IPVS: ftp: loaded support on port[0] = 21 [ 81.900383][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.952027][ T8731] IPVS: ftp: loaded support on port[0] = 21 [ 81.969177][ T8727] team0: Port device team_slave_0 added [ 81.982380][ T8727] team0: Port device team_slave_1 added [ 82.009601][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.016771][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.043326][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.056019][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.063120][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.095666][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.161509][ T8727] device hsr_slave_0 entered promiscuous mode [ 82.168052][ T8727] device hsr_slave_1 entered promiscuous mode [ 82.193868][ T8733] IPVS: ftp: loaded support on port[0] = 21 [ 82.221672][ T8729] chnl_net:caif_netlink_parms(): no params data found [ 82.244160][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 82.309369][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 82.349673][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.356884][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.364688][ T8729] device bridge_slave_0 entered promiscuous mode [ 82.383485][ T8727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.418814][ T8727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.428602][ T8727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.446817][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.459233][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.467679][ T8731] device bridge_slave_0 entered promiscuous mode [ 82.485424][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.492448][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.500207][ T8729] device bridge_slave_1 entered promiscuous mode [ 82.512401][ T8727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.521279][ T8737] IPVS: ftp: loaded support on port[0] = 21 [ 82.529924][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.537961][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.545583][ T8731] device bridge_slave_1 entered promiscuous mode [ 82.566029][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 82.584621][ T8729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.601474][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.612341][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.628232][ T8729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.661562][ T8731] team0: Port device team_slave_0 added [ 82.682523][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.689574][ T8727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.697005][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.704083][ T8727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.716256][ T8731] team0: Port device team_slave_1 added [ 82.729113][ T8729] team0: Port device team_slave_0 added [ 82.737990][ T8729] team0: Port device team_slave_1 added [ 82.760242][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 82.778298][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.785285][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.812098][ T8729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.829253][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.836442][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.863113][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.876704][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.884880][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.894539][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.901482][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.927571][ T8729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.942535][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.950153][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.958314][ T8733] device bridge_slave_0 entered promiscuous mode [ 82.965581][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.972511][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.999027][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.025091][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.032166][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.040841][ T8733] device bridge_slave_1 entered promiscuous mode [ 83.061173][ T8729] device hsr_slave_0 entered promiscuous mode [ 83.069690][ T8729] device hsr_slave_1 entered promiscuous mode [ 83.076255][ T8729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.083853][ T8729] Cannot create hsr debugfs directory [ 83.093534][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.120508][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.134780][ T8731] device hsr_slave_0 entered promiscuous mode [ 83.144462][ T8731] device hsr_slave_1 entered promiscuous mode [ 83.150879][ T8731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.159091][ T8731] Cannot create hsr debugfs directory [ 83.164981][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.171990][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.180028][ T8735] device bridge_slave_0 entered promiscuous mode [ 83.188650][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.195905][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.203661][ T8735] device bridge_slave_1 entered promiscuous mode [ 83.245997][ T8733] team0: Port device team_slave_0 added [ 83.251649][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 83.275644][ T8733] team0: Port device team_slave_1 added [ 83.293245][ T8731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.305181][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.322202][ T8731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.341605][ T8731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.353467][ T8731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.365317][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.392126][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.400424][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.427143][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.439188][ T8735] team0: Port device team_slave_0 added [ 83.447984][ T8735] team0: Port device team_slave_1 added [ 83.459700][ T8729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.476042][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.482995][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.509485][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.531632][ T8729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.541839][ T8729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.550462][ T8729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.559016][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.566389][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.575164][ T8737] device bridge_slave_0 entered promiscuous mode [ 83.588766][ T8733] device hsr_slave_0 entered promiscuous mode [ 83.595855][ T8733] device hsr_slave_1 entered promiscuous mode [ 83.602218][ T8733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.609791][ T8733] Cannot create hsr debugfs directory [ 83.620856][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.628465][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.655055][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.666114][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.673140][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.680855][ T8737] device bridge_slave_1 entered promiscuous mode [ 83.698566][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.705705][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.732786][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.747194][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.753266][ T35] Bluetooth: hci0: command 0x0409 tx timeout [ 83.760923][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.777200][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.784963][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.792365][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.801296][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.809970][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.817093][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.834898][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.864744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.873050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.881809][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.888855][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.897570][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.909268][ T8735] device hsr_slave_0 entered promiscuous mode [ 83.914349][ T35] Bluetooth: hci1: command 0x0409 tx timeout [ 83.921530][ T8735] device hsr_slave_1 entered promiscuous mode [ 83.927865][ T8735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.935442][ T8735] Cannot create hsr debugfs directory [ 83.966023][ T8733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.981997][ T8733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.990763][ T8733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.004070][ T9556] Bluetooth: hci2: command 0x0409 tx timeout [ 84.010813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.024920][ T8737] team0: Port device team_slave_0 added [ 84.035176][ T8737] team0: Port device team_slave_1 added [ 84.046434][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.056693][ T8733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.098312][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.106982][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.115778][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.124357][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.132815][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.141296][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.149835][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.157304][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.157654][ T3963] Bluetooth: hci3: command 0x0409 tx timeout [ 84.185655][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.203233][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.216427][ T8727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.230183][ T8727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.243179][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.251040][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.260136][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.268842][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.276136][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.303139][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.313837][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 84.328184][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.341914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.351056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.369296][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.383230][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.391530][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.400894][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.408053][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.416001][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.424425][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.432565][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.439651][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.447421][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.459522][ T8737] device hsr_slave_0 entered promiscuous mode [ 84.468213][ T8737] device hsr_slave_1 entered promiscuous mode [ 84.473107][ T3963] Bluetooth: hci5: command 0x0409 tx timeout [ 84.480521][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.488236][ T8737] Cannot create hsr debugfs directory [ 84.506511][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.531941][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.539761][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.547299][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.555104][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.562548][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.573303][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.581044][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.591391][ T8735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.609220][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.618940][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.627799][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.636685][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.645257][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.654220][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.661231][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.668832][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.677246][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.685531][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.692624][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.700313][ T8735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.722906][ T8729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.733675][ T8729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.746105][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.754503][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.762426][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.771421][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.780215][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.788691][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.797167][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.805619][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.814014][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.821488][ T8735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.830815][ T8735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.867269][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.877664][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.886894][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.895739][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.903596][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.912154][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.922407][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.930656][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.945458][ T8727] device veth0_vlan entered promiscuous mode [ 84.953671][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.961998][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.971531][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.979938][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.988297][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.996754][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.005306][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.014074][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.022302][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.030470][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.038407][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.048351][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.059159][ T8731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.070276][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.084230][ T8727] device veth1_vlan entered promiscuous mode [ 85.095327][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.102521][ T8737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.112123][ T8737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.123234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.131660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.140510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.149130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.157497][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.164541][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.172279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.180917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.189243][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.196426][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.204571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.223219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.230657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.238977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.247490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.256921][ T8737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.268156][ T8737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.279632][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.289406][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.306760][ T8727] device veth0_macvtap entered promiscuous mode [ 85.318531][ T8727] device veth1_macvtap entered promiscuous mode [ 85.326785][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.335449][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.343344][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.351927][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.360671][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.369351][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.393905][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.402739][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.412855][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.421481][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.441760][ T8729] device veth0_vlan entered promiscuous mode [ 85.452351][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.469379][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.477599][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.486225][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.495170][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.503791][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.512010][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.520880][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.528687][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.543449][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.553299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.561515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.570318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.578797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.587224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.595521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.604700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.613341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.622386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.630317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.641395][ T8731] device veth0_vlan entered promiscuous mode [ 85.651342][ T8729] device veth1_vlan entered promiscuous mode [ 85.660240][ T8727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.669858][ T8727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.678727][ T8727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.687497][ T8727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.699716][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.710787][ T8731] device veth1_vlan entered promiscuous mode [ 85.726075][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.746369][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.757274][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.765846][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.773733][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.781671][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.789811][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.797432][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.812963][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.820406][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.828851][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.837599][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.852712][ T3963] Bluetooth: hci0: command 0x041b tx timeout [ 85.860959][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.872346][ T8729] device veth0_macvtap entered promiscuous mode [ 85.880667][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.889391][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.898132][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.906702][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.913751][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.921694][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.930096][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.938405][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.945479][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.953319][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.962382][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.975510][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.995372][ T8373] Bluetooth: hci1: command 0x041b tx timeout [ 86.002099][ T8731] device veth0_macvtap entered promiscuous mode 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) [ 86.023433][ T8729] device veth1_macvtap entered promiscuous mode [ 86.031184][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.054513][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.063415][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) [ 86.072671][ T35] Bluetooth: hci2: command 0x041b tx timeout [ 86.083267][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) [ 86.120744][ T8735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.142916][ T8735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.159860][ T8731] device veth1_macvtap entered promiscuous mode 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) [ 86.173222][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.183320][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.203064][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.210936][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:55:53 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) ioctl$VIDIOC_EXPBUF(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980001}) 04:55:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x56) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 86.242599][ T8373] Bluetooth: hci3: command 0x041b tx timeout [ 86.242938][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.263531][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.271700][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.307120][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.325771][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.334510][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.353013][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.370157][ T8733] device veth0_vlan entered promiscuous mode [ 86.390596][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 86.392727][ T8373] Bluetooth: hci4: command 0x041b tx timeout [ 86.401453][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417995][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.432562][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 86.444339][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.454169][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 86.464686][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.475314][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.482595][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.490110][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.498334][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.507144][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.515954][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.525931][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.534431][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.545333][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.552887][ T8373] Bluetooth: hci5: command 0x041b tx timeout [ 86.557629][ T8733] device veth1_vlan entered promiscuous mode [ 86.567457][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 86.578590][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.589519][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.597439][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.605244][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.612833][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.620772][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.629176][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.652522][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.660346][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.668900][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.679096][ T8729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688410][ T8729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.698283][ T8729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.707116][ T8729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.720273][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.734244][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 86.745783][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.756018][ T8731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 86.766446][ T8731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.777299][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.784899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.795741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.803275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.811646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.823072][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.839468][ T8731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.849104][ T8731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859061][ T8731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.868305][ T8731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.878324][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.890267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.899059][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.906101][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.919530][ T8733] device veth0_macvtap entered promiscuous mode [ 86.939342][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.947162][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.956098][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.964795][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.973267][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.981361][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.988394][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.996334][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.005436][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.015981][ T8733] device veth1_macvtap entered promiscuous mode [ 87.031646][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.070586][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.090147][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.097004][T10070] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 87.100017][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:55:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000508005a80648c63940d0324fc6010000a4002000000051a82c137153e670902088003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:55:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x56) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 87.106224][T10070] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.134983][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.164067][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.185223][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.194479][T10077] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 87.208536][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.224831][T10077] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.228746][ T8737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.262035][ T8737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.286755][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 87.300273][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.310812][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 87.322352][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.343168][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 87.383411][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.398755][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.408579][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.418019][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.426637][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.435869][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.444130][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.452912][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.464756][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.487191][ T8735] device veth0_vlan entered promiscuous mode [ 87.496484][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 87.508129][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.518686][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 87.529443][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.539560][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 87.550264][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.561264][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.569958][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.578989][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.588074][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.597037][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.610676][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.621335][ T8735] device veth1_vlan entered promiscuous mode [ 87.630620][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.638554][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.646606][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.654799][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.662118][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.671046][ T8733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.680519][ T8733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.689352][ T8733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698176][ T8733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.737531][ T8735] device veth0_macvtap entered promiscuous mode [ 87.745641][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.754656][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.763295][ T9259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.778161][ T8735] device veth1_macvtap entered promiscuous mode [ 87.786708][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.794897][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.822063][T10091] BPF:[1] ARRAY (anon) [ 87.826418][T10091] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 87.832621][T10092] BPF:[1] ARRAY (anon) 04:55:55 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x7}]}}, &(0x7f0000000300)=""/250, 0x32, 0xfa, 0x8}, 0x20) [ 87.837023][T10091] BPF: [ 87.839809][T10092] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 87.846456][T10091] BPF:vlen != 0 [ 87.846660][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.849961][T10091] BPF: [ 87.849961][T10091] [ 87.868846][T10092] BPF: [ 87.871627][T10092] BPF:vlen != 0 [ 87.875291][T10092] BPF: [ 87.875291][T10092] [ 87.883884][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.896071][T10095] BPF:[1] ARRAY (anon) [ 87.900647][T10095] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 87.901241][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 87.907758][T10095] BPF: [ 87.920263][ T9556] Bluetooth: hci0: command 0x040f tx timeout [ 87.926317][T10095] BPF:vlen != 0 [ 87.930862][T10095] BPF: [ 87.930862][T10095] [ 87.933890][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.982218][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 87.993214][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.003469][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.013909][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.023826][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.034402][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.045992][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.055348][ T8737] device veth0_vlan entered promiscuous mode [ 88.066519][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.074897][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.082343][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 88.084377][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.097197][ T8373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.106100][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.114226][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.124317][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.135966][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.145910][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.152336][ T3963] Bluetooth: hci2: command 0x040f tx timeout [ 88.158077][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.172145][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.182600][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.193261][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.203702][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.214449][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.224394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.233808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.244955][ T8735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.253823][ T8735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.262871][ T8735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271619][ T8735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.283780][ T8737] device veth1_vlan entered promiscuous mode [ 88.309447][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.318748][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.328056][ T9995] Bluetooth: hci3: command 0x040f tx timeout 04:55:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b5eed4af01db22b7c134010000007a15", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="ec3b7142da4c0dd31fdac4", 0xb}, {&(0x7f00000007c0)="3bbb7d6dc65c467cf0d7667b683b7d1a652c2cd7d8d9243acfee6196ee02ecd9a92070d4086b1b9df146f65911f35e26df596d751f4e2bc215305b4634be31c5d4016817fa7f75b1cd7d3b877712557209426a501afdb1deef686ff42eca303d1f60c9c7fa454cecac41e6466ab42700"/126, 0x7e}, {&(0x7f0000000500)="17b86b1642781adc471f12c1f661d46e29bd577c58f3573757a53743a7cf761b403fce830f7985fad9ba495f7675beeb7b679c14e7679e07780a6ce7bdaa4f291ca63af4cef3f2b5a104dc30b5c17349f08b2d5076962007a07bc961878c2ba70f9d4e9cd380d71f4cb93b16424a05ed44f17d30e636b6b1bda4adc3704a61e8d0d0eed9569804", 0x87}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}, 0x0) read$alg(r1, &(0x7f0000002480)=""/4110, 0x100e) [ 88.338216][ T8737] device veth0_macvtap entered promiscuous mode [ 88.365496][ T8737] device veth1_macvtap entered promiscuous mode [ 88.390894][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.422102][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.432033][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.452237][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.462044][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.473377][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.475130][ T9995] Bluetooth: hci4: command 0x040f tx timeout [ 88.483553][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.500452][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.510434][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 88.521015][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.532006][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.547336][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.556048][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.563912][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.572544][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.584529][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.595363][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.605486][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.615915][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.625937][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.632096][ T3963] Bluetooth: hci5: command 0x040f tx timeout [ 88.636563][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652988][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.663389][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.673273][ T8737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 88.683693][ T8737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.694753][ T8737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.707177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.716761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.728774][ T8737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.738514][ T8737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.747221][ T8737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.755939][ T8737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 04:55:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:56 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x4, [@union, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "7f"}, @struct, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x50}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:55:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x56) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:55:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000508005a80648c63940d0324fc6010000a4002000000051a82c137153e670902088003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:55:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x7}]}}, &(0x7f0000000300)=""/250, 0x32, 0xfa, 0x8}, 0x20) 04:55:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b5eed4af01db22b7c134010000007a15", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="ec3b7142da4c0dd31fdac4", 0xb}, {&(0x7f00000007c0)="3bbb7d6dc65c467cf0d7667b683b7d1a652c2cd7d8d9243acfee6196ee02ecd9a92070d4086b1b9df146f65911f35e26df596d751f4e2bc215305b4634be31c5d4016817fa7f75b1cd7d3b877712557209426a501afdb1deef686ff42eca303d1f60c9c7fa454cecac41e6466ab42700"/126, 0x7e}, {&(0x7f0000000500)="17b86b1642781adc471f12c1f661d46e29bd577c58f3573757a53743a7cf761b403fce830f7985fad9ba495f7675beeb7b679c14e7679e07780a6ce7bdaa4f291ca63af4cef3f2b5a104dc30b5c17349f08b2d5076962007a07bc961878c2ba70f9d4e9cd380d71f4cb93b16424a05ed44f17d30e636b6b1bda4adc3704a61e8d0d0eed9569804", 0x87}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}, 0x0) read$alg(r1, &(0x7f0000002480)=""/4110, 0x100e) [ 88.854029][T10118] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 88.864808][T10118] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.879718][T10123] BPF:[1] ARRAY (anon) [ 88.888370][T10123] BPF:type_id=0 index_type_id=0 nr_elems=0 04:55:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b5eed4af01db22b7c134010000007a15", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="ec3b7142da4c0dd31fdac4", 0xb}, {&(0x7f00000007c0)="3bbb7d6dc65c467cf0d7667b683b7d1a652c2cd7d8d9243acfee6196ee02ecd9a92070d4086b1b9df146f65911f35e26df596d751f4e2bc215305b4634be31c5d4016817fa7f75b1cd7d3b877712557209426a501afdb1deef686ff42eca303d1f60c9c7fa454cecac41e6466ab42700"/126, 0x7e}, {&(0x7f0000000500)="17b86b1642781adc471f12c1f661d46e29bd577c58f3573757a53743a7cf761b403fce830f7985fad9ba495f7675beeb7b679c14e7679e07780a6ce7bdaa4f291ca63af4cef3f2b5a104dc30b5c17349f08b2d5076962007a07bc961878c2ba70f9d4e9cd380d71f4cb93b16424a05ed44f17d30e636b6b1bda4adc3704a61e8d0d0eed9569804", 0x87}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}, 0x0) read$alg(r1, &(0x7f0000002480)=""/4110, 0x100e) 04:55:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000508005a80648c63940d0324fc6010000a4002000000051a82c137153e670902088003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:55:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x56) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:55:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x7}]}}, &(0x7f0000000300)=""/250, 0x32, 0xfa, 0x8}, 0x20) [ 88.908421][T10123] BPF: [ 88.916756][T10123] BPF:vlen != 0 [ 88.941666][T10123] BPF: [ 88.941666][T10123] 04:55:56 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) [ 88.993011][T10136] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 89.023513][T10140] BPF:[1] ARRAY (anon) [ 89.037382][T10140] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 89.045547][T10136] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.063946][T10140] BPF: [ 89.069295][T10140] BPF:vlen != 0 [ 89.074839][T10140] BPF: [ 89.074839][T10140] [ 89.992179][ T9556] Bluetooth: hci0: command 0x0419 tx timeout [ 90.153423][ T9556] Bluetooth: hci1: command 0x0419 tx timeout [ 90.232136][ T8373] Bluetooth: hci2: command 0x0419 tx timeout [ 90.392012][ T9995] Bluetooth: hci3: command 0x0419 tx timeout [ 90.551807][ T9995] Bluetooth: hci4: command 0x0419 tx timeout [ 90.713857][ T9995] Bluetooth: hci5: command 0x0419 tx timeout 04:55:59 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x4, [@union, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "7f"}, @struct, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x50}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:55:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:59 executing program 1: fsopen(0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept$packet(r0, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000140), 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000001200)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 04:55:59 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e5, &(0x7f00000000c0)) 04:55:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:55:59 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x24) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$nbd(r1, &(0x7f0000001380)=ANY=[], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 04:55:59 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e5, &(0x7f00000000c0)) 04:55:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:55:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:55:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 04:55:59 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e5, &(0x7f00000000c0)) 04:56:02 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x4, [@union, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "7f"}, @struct, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x50}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 04:56:02 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:56:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:56:02 executing program 1: fsopen(0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept$packet(r0, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000140), 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000001200)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 04:56:02 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e5, &(0x7f00000000c0)) 04:56:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 04:56:02 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x9, 0x0, @fr=0x0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8b29, &(0x7f0000000000)) ioctl$sock_netdev_private(r0, 0x8b28, &(0x7f0000000000)) 04:56:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 04:56:02 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) 04:56:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:56:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff07000300000000a08b7907080494e5d04e0d5e9f7933b474b67b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 95.040333][ C1] hrtimer: interrupt took 25749 ns 04:56:02 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) 04:56:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) 04:56:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, 0x3, 0x6, 0x605, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 04:56:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b5e5a076d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a09000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e795780f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b626c57c2691208171656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10d858e8327e701fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fcc3dc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb17c7beba3da8223fe5308e4e65eebaace04f4087c4f0da0d9a88f9dbb593ddebf70132a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b6b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2453dcb6a2bfd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040360ab9261503def363fb099408885afc2bf9a4f8c35070669ea69f5e4be1b8e0d634ebc105697e98186fc5141bd670dba6623279f73db9dec75070cd9ab0fd96b069ef6d2857b6bf955012cf7fe50d133da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7eac9e8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead1348474250eda2c8067ab743c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10241f43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a082776eb0937523f5292d126599d4345cde64f903c3415c618a32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a442863d6e257cfa4ce50f3d163d442824414a7da26cc86d7e18631c2061b1c8a8e3c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09ea4770b4278fa14547d8ce3c21188e5e4e2baacd98e8e443d6aaafe80053636ed1d99346c2468dd952595d78e9583bf4ea5de36099e3cddcb23aefd124b0ab85580f4ebb6eddb9e87c9ece874be869b3abe1c6ea55887dfa18d0aea136eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e49d21836e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b6a7651004132c6e0898374c644eea45de7867a0efbad0ab2bc33b350440a90b79134e42da4e030916d86a7c2e1b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b29996e5cefbc9f857bc1332d200194f219821e21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed388a88da09c01a4b827aa1784d927aca9b8540534c5c49a424ccfbc2213fc1572b0204dd456c81a454d1f32fb169974aae624ea59500f5e048b2780666d7f49af25be909984aea1bc1f33426f86b4b941c08dfe2bc8ec246ec1aae120d32405e428923f3a83d9ba5c8ff226ebf2120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e4663322dfc9245ce3e3a097fb82f4e3b61a570b96f8274f72f1c55ee3d325c7496afc2f10cfea516ae436751227378f00ca0f1f6c1dc700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d7a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e414962792dab2414689a540d2801792756f90b37f0858efc387f5592024314a4b0ed750fa72e5948ac30f5921c14ef578d413e7b2a9e2f87f7b44949fe14c000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff07000300000000a08b7907080494e5d04e0d5e9f7933b474b67b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:56:05 executing program 1: fsopen(0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept$packet(r0, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000140), 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000001200)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 04:56:05 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) 04:56:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@multicast2}, {@in=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) [ 98.006607][ T28] audit: type=1804 audit(1600059365.316:2): pid=10247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056330/syzkaller.84bcAJ/4/bus" dev="sda1" ino=15826 res=1 errno=0 04:56:05 executing program 1: fsopen(0x0, 0x0) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) accept$packet(r0, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000140), 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000001200)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 04:56:05 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) [ 98.093635][ T28] audit: type=1804 audit(1600059365.356:3): pid=10247 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056330/syzkaller.84bcAJ/4/bus" dev="sda1" ino=15826 res=1 errno=0 04:56:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff07000300000000a08b7907080494e5d04e0d5e9f7933b474b67b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:56:05 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@multicast2}, {@in=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) 04:56:05 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) [ 98.221911][ T28] audit: type=1804 audit(1600059365.486:4): pid=10264 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056330/syzkaller.84bcAJ/5/bus" dev="sda1" ino=15820 res=1 errno=0 04:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@multicast2}, {@in=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) 04:56:05 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) [ 98.319803][ T28] audit: type=1804 audit(1600059365.566:5): pid=10269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir460610404/syzkaller.MzLFiw/19/bus" dev="sda1" ino=15818 res=1 errno=0 [ 98.401264][ T28] audit: type=1804 audit(1600059365.616:6): pid=10277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056330/syzkaller.84bcAJ/6/bus" dev="sda1" ino=15834 res=1 errno=0 [ 98.482871][ T28] audit: type=1804 audit(1600059365.696:7): pid=10280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir460610404/syzkaller.MzLFiw/20/bus" dev="sda1" ino=15820 res=1 errno=0 04:56:08 executing program 0: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) 04:56:08 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 04:56:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:56:08 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff07000300000000a08b7907080494e5d04e0d5e9f7933b474b67b", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:56:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@multicast2}, {@in=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'xts-camellia-asm\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) 04:56:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 101.133241][ T28] audit: type=1804 audit(1600059368.446:8): pid=10299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir460610404/syzkaller.MzLFiw/21/bus" dev="sda1" ino=15847 res=1 errno=0 04:56:08 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @raw_data="2f98d9ef36ed7a29524747424e4d31321fe51b93f9dc1fdc8d3e220692138df12f8de2c2b03afa1461aba4cb2a3e35158c0b7d787da2a48c3552a0305e957f94c7133ed76908617bda6ea891d8b69c1447bfb2dc551fca79f03b72ab29e9c407c1ba492ea38f063b745acc0d4dda1f1125363f6b8c66d8c907d0fc866e649982945e8dc223220ff69b314e9665dab8202d52f39726d189f56616f435e7f113ecf92604141d49657963cafba8bf9b84d92a297a271d506fa2b5992866c3892e38f878383396abca4d"}) 04:56:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) [ 101.212105][ T28] audit: type=1804 audit(1600059368.476:9): pid=10301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir911056330/syzkaller.84bcAJ/7/bus" dev="sda1" ino=15848 res=1 errno=0 04:56:08 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @raw_data="2f98d9ef36ed7a29524747424e4d31321fe51b93f9dc1fdc8d3e220692138df12f8de2c2b03afa1461aba4cb2a3e35158c0b7d787da2a48c3552a0305e957f94c7133ed76908617bda6ea891d8b69c1447bfb2dc551fca79f03b72ab29e9c407c1ba492ea38f063b745acc0d4dda1f1125363f6b8c66d8c907d0fc866e649982945e8dc223220ff69b314e9665dab8202d52f39726d189f56616f435e7f113ecf92604141d49657963cafba8bf9b84d92a297a271d506fa2b5992866c3892e38f878383396abca4d"}) 04:56:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:56:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 04:56:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @raw_data="2f98d9ef36ed7a29524747424e4d31321fe51b93f9dc1fdc8d3e220692138df12f8de2c2b03afa1461aba4cb2a3e35158c0b7d787da2a48c3552a0305e957f94c7133ed76908617bda6ea891d8b69c1447bfb2dc551fca79f03b72ab29e9c407c1ba492ea38f063b745acc0d4dda1f1125363f6b8c66d8c907d0fc866e649982945e8dc223220ff69b314e9665dab8202d52f39726d189f56616f435e7f113ecf92604141d49657963cafba8bf9b84d92a297a271d506fa2b5992866c3892e38f878383396abca4d"}) 04:56:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x9, @raw_data="2f98d9ef36ed7a29524747424e4d31321fe51b93f9dc1fdc8d3e220692138df12f8de2c2b03afa1461aba4cb2a3e35158c0b7d787da2a48c3552a0305e957f94c7133ed76908617bda6ea891d8b69c1447bfb2dc551fca79f03b72ab29e9c407c1ba492ea38f063b745acc0d4dda1f1125363f6b8c66d8c907d0fc866e649982945e8dc223220ff69b314e9665dab8202d52f39726d189f56616f435e7f113ecf92604141d49657963cafba8bf9b84d92a297a271d506fa2b5992866c3892e38f878383396abca4d"}) 04:56:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 04:56:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 04:56:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 04:56:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 04:56:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22e000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x1200008, 0x4) 04:56:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 04:56:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22e000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x1200008, 0x4) 04:56:14 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)) read(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) 04:56:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22e000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x1200008, 0x4) [ 107.512770][T10407] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 04:56:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x22e000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x1200008, 0x4) 04:56:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:14 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)) read(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) 04:56:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1d', ':', '2', '.', '12'}}, 0x15) [ 107.863473][T10424] ================================================================== [ 107.871592][T10424] BUG: KCSAN: data-race in ____sys_sendmsg / ipv6_setsockopt [ 107.883887][T10424] [ 107.886204][T10424] write to 0xffff8880bb48aca0 of 8 bytes by task 10425 on cpu 1: [ 107.893997][T10424] ipv6_setsockopt+0x35af/0x3710 [ 107.898923][T10424] udpv6_setsockopt+0x85/0x90 [ 107.903610][T10424] sock_common_setsockopt+0x5d/0x70 [ 107.908796][T10424] __sys_setsockopt+0x2dc/0x450 [ 107.913634][T10424] __x64_sys_setsockopt+0x62/0x70 [ 107.918637][T10424] do_syscall_64+0x39/0x80 [ 107.923038][T10424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 107.928901][T10424] [ 107.931563][T10424] read to 0xffff8880bb48aca0 of 8 bytes by task 10424 on cpu 0: [ 107.939177][T10424] ____sys_sendmsg+0x335/0x4d0 [ 107.943926][T10424] __sys_sendmmsg+0x322/0x4b0 [ 107.948603][T10424] __x64_sys_sendmmsg+0x53/0x60 [ 107.953441][T10424] do_syscall_64+0x39/0x80 [ 107.957855][T10424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 107.963897][T10424] [ 107.966209][T10424] Reported by Kernel Concurrency Sanitizer on: [ 107.972349][T10424] CPU: 0 PID: 10424 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 107.981023][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.991066][T10424] ================================================================== [ 107.999135][T10424] Kernel panic - not syncing: panic_on_warn set ... [ 108.006836][T10424] CPU: 0 PID: 10424 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 108.015711][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.025749][T10424] Call Trace: [ 108.029028][T10424] dump_stack+0x10f/0x19d [ 108.033352][T10424] panic+0x207/0x64a [ 108.037252][T10424] ? vprintk_emit+0x44a/0x4f0 [ 108.041918][T10424] kcsan_report+0x684/0x690 [ 108.046414][T10424] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 108.051943][T10424] ? ____sys_sendmsg+0x335/0x4d0 [ 108.056868][T10424] ? __sys_sendmmsg+0x322/0x4b0 [ 108.061715][T10424] ? __x64_sys_sendmmsg+0x53/0x60 [ 108.066722][T10424] ? do_syscall_64+0x39/0x80 [ 108.071300][T10424] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 108.077367][T10424] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 108.082637][T10424] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 108.087906][T10424] kcsan_setup_watchpoint+0x41e/0x4a0 [ 108.093271][T10424] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 108.098540][T10424] ____sys_sendmsg+0x335/0x4d0 [ 108.103402][T10424] ? import_iovec+0x171/0x1c0 [ 108.108663][T10424] __sys_sendmmsg+0x322/0x4b0 [ 108.113332][T10424] ? ipv6_portaddr_hash+0x1d0/0x1d0 [ 108.118550][T10424] ? aa_sk_perm+0x499/0x540 [ 108.123047][T10424] ? __ip6_datagram_connect+0x40b/0x900 [ 108.128586][T10424] ? __this_cpu_preempt_check+0x18/0x20 [ 108.134130][T10424] ? __local_bh_enable_ip+0x48/0x70 [ 108.139316][T10424] ? release_sock+0x104/0x110 [ 108.143978][T10424] ? ip6_datagram_connect+0x34/0x40 [ 108.149161][T10424] ? inet_dgram_connect+0x115/0x200 [ 108.154357][T10424] ? ktime_get_ts64+0x2d9/0x310 [ 108.159205][T10424] ? set_normalized_timespec64+0x104/0x130 04:56:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 04:56:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 04:56:15 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)) read(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) 04:56:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1d', ':', '2', '.', '12'}}, 0x15) [ 108.165001][T10424] ? check_preemption_disabled+0x51/0x140 [ 108.170713][T10424] ? debug_smp_processor_id+0x18/0x20 [ 108.176076][T10424] __x64_sys_sendmmsg+0x53/0x60 [ 108.180939][T10424] do_syscall_64+0x39/0x80 [ 108.185348][T10424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 108.192248][T10424] RIP: 0033:0x45d5f9 04:56:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '0', ':', '1d', ':', '2', '.', '12'}}, 0x15) [ 108.196133][T10424] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 108.215730][T10424] RSP: 002b:00007fd79e321c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.224193][T10424] RAX: ffffffffffffffda RBX: 0000000000027a40 RCX: 000000000045d5f9 [ 108.232168][T10424] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000004 [ 108.240126][T10424] RBP: 000000000118d028 R08: 0000000000000000 R09: 0000000000000000 [ 108.248089][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 108.256062][T10424] R13: 00007ffd6bd2f6ef R14: 00007fd79e3229c0 R15: 000000000118cfec [ 108.265633][T10424] Kernel Offset: disabled [ 108.269945][T10424] Rebooting in 86400 seconds..