[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2020/09/25 21:03:10 fuzzer started 2020/09/25 21:03:11 dialing manager at 10.128.0.105:39505 2020/09/25 21:03:11 syscalls: 3234 2020/09/25 21:03:11 code coverage: enabled 2020/09/25 21:03:11 comparison tracing: enabled 2020/09/25 21:03:11 extra coverage: extra coverage is not supported by the kernel 2020/09/25 21:03:11 setuid sandbox: enabled 2020/09/25 21:03:11 namespace sandbox: enabled 2020/09/25 21:03:11 Android sandbox: enabled 2020/09/25 21:03:11 fault injection: enabled 2020/09/25 21:03:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/25 21:03:11 net packet injection: enabled 2020/09/25 21:03:11 net device setup: enabled 2020/09/25 21:03:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/25 21:03:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/25 21:03:11 USB emulation: /dev/raw-gadget does not exist 2020/09/25 21:03:11 hci packet injection: enabled 2020/09/25 21:03:11 wifi device emulation: enabled 21:04:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) dup3(r0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r3 = dup(r2) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0xc4) syzkaller login: [ 143.989915] audit: type=1400 audit(1601067894.573:8): avc: denied { execmem } for pid=6488 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:04:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x8281) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:04:55 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r3, &(0x7f000000b0c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="82", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 21:04:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:04:55 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r2}, [@IFLA_GTP_FD1={0x8, 0x4}]}}}}]}, 0x48}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 145.192167] IPVS: ftp: loaded support on port[0] = 21 [ 145.331075] chnl_net:caif_netlink_parms(): no params data found [ 145.380067] IPVS: ftp: loaded support on port[0] = 21 [ 145.489597] IPVS: ftp: loaded support on port[0] = 21 [ 145.580888] chnl_net:caif_netlink_parms(): no params data found [ 145.674274] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.690185] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.704974] device bridge_slave_0 entered promiscuous mode [ 145.730486] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.736867] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.745574] device bridge_slave_1 entered promiscuous mode [ 145.790222] IPVS: ftp: loaded support on port[0] = 21 [ 145.818609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.863090] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.880166] IPVS: ftp: loaded support on port[0] = 21 [ 145.911320] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.918618] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.926138] device bridge_slave_0 entered promiscuous mode [ 145.993928] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.013017] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.022133] device bridge_slave_1 entered promiscuous mode [ 146.125195] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.133525] team0: Port device team_slave_0 added [ 146.142692] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.150508] team0: Port device team_slave_1 added [ 146.175336] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.190537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.209746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.211147] IPVS: ftp: loaded support on port[0] = 21 [ 146.216012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.249144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.251930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.265993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.292060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.306321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.315248] chnl_net:caif_netlink_parms(): no params data found [ 146.346466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.403095] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.413767] team0: Port device team_slave_0 added [ 146.420392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.428418] team0: Port device team_slave_1 added [ 146.453635] device hsr_slave_0 entered promiscuous mode [ 146.459590] device hsr_slave_1 entered promiscuous mode [ 146.498672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.544439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.552704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.564014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.589678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.604194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.610814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.636704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.677431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.743562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.803345] chnl_net:caif_netlink_parms(): no params data found [ 146.817022] chnl_net:caif_netlink_parms(): no params data found [ 146.832355] device hsr_slave_0 entered promiscuous mode [ 146.838106] device hsr_slave_1 entered promiscuous mode [ 146.855737] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.863000] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.871994] device bridge_slave_0 entered promiscuous mode [ 146.883943] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.891150] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.899218] device bridge_slave_1 entered promiscuous mode [ 146.916778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.955617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.065686] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.105840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.171875] chnl_net:caif_netlink_parms(): no params data found [ 147.186928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.201612] team0: Port device team_slave_0 added [ 147.209976] Bluetooth: hci0: command 0x0409 tx timeout [ 147.235864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.246859] team0: Port device team_slave_1 added [ 147.304888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.312245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.337539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.362004] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.371780] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.378277] Bluetooth: hci1: command 0x0409 tx timeout [ 147.380219] device bridge_slave_0 entered promiscuous mode [ 147.396513] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.405126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.412005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.437430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.463643] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.470149] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.477138] device bridge_slave_1 entered promiscuous mode [ 147.501152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.508390] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.514743] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.522266] device bridge_slave_0 entered promiscuous mode [ 147.528050] Bluetooth: hci2: command 0x0409 tx timeout [ 147.560941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.586982] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.594449] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.602513] device bridge_slave_1 entered promiscuous mode [ 147.611239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.652881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.665477] device hsr_slave_0 entered promiscuous mode [ 147.671648] device hsr_slave_1 entered promiscuous mode [ 147.681363] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.688326] Bluetooth: hci3: command 0x0409 tx timeout [ 147.695464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.745307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.772167] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.780144] team0: Port device team_slave_0 added [ 147.786769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.818580] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.824967] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.833302] device bridge_slave_0 entered promiscuous mode [ 147.841200] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.847773] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.848362] Bluetooth: hci4: command 0x0409 tx timeout [ 147.855192] device bridge_slave_1 entered promiscuous mode [ 147.866196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.874711] team0: Port device team_slave_1 added [ 147.886440] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.895598] team0: Port device team_slave_0 added [ 147.902280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.910691] team0: Port device team_slave_1 added [ 147.962929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.969299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.999060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.009505] Bluetooth: hci5: command 0x0409 tx timeout [ 148.028065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.050592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.061025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.067255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.093193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.105492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.111838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.137443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.149006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.155263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.180756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.192881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.206272] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.216786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.224830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.232841] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.248974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.264423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.291376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.329426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.336879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.345875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 148.354465] team0: Port device team_slave_0 added [ 148.362536] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.369055] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.398580] device hsr_slave_0 entered promiscuous mode [ 148.405659] device hsr_slave_1 entered promiscuous mode [ 148.413049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 148.424483] team0: Port device team_slave_1 added [ 148.445651] device hsr_slave_0 entered promiscuous mode [ 148.452327] device hsr_slave_1 entered promiscuous mode [ 148.460031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 148.468344] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 148.484203] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 148.507988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.516777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.524704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.532590] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.539158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.546552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.558523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 148.567736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.573984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.601397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.616209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.637581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.658924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.666918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.675653] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.682139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.692302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.699932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.726136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.743088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.776701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.784700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.799078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.826857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.837668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.910695] device hsr_slave_0 entered promiscuous mode [ 148.916819] device hsr_slave_1 entered promiscuous mode [ 148.933134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.943514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.966302] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 148.983280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.992639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.000571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.008965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.016916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.028393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.042043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.063255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.088029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.102895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.111341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.124975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.144833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.159928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.168374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.176258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.184919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.193153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.202657] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.209435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.222320] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 149.229182] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.255222] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 149.273227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.285686] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.294684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.297734] Bluetooth: hci0: command 0x041b tx timeout [ 149.305921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.323042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 149.329522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.339803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.348234] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.354594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.362603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.370060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.377492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.392392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.401346] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.412341] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 149.419331] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.436160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.444048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.448314] Bluetooth: hci1: command 0x041b tx timeout [ 149.459434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.467008] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.473472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.481113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.488789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.495545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.504085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.512001] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.518467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.530240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.541769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.552453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.583214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.591783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.607106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.616962] Bluetooth: hci2: command 0x041b tx timeout [ 149.625909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.651126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.661056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.671114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.679379] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.685763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.693324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.701511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.714046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.740480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.749774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.758567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.766575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.767468] Bluetooth: hci3: command 0x041b tx timeout [ 149.775029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.790266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.808369] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.816597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.826795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.852411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.860065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.869816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.882207] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.893710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.906573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.915240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.922970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.928084] Bluetooth: hci4: command 0x041b tx timeout [ 149.931174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.943769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.952154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.962740] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.970104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.989543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.010682] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.018998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.031478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.039312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.050831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.059050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.068587] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.081558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.096482] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.098191] Bluetooth: hci5: command 0x041b tx timeout [ 150.111069] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.111795] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.130140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.136329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.144817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.156558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.173661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 150.184967] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.196928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.208619] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.214709] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.222776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.230908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.238793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.246180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.260215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.267123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.275418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 150.287800] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.300534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.309949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.317101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.324470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.332715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.340998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.349613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.357190] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.363610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.372230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.382535] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 150.388782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.399587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.411993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.424362] device veth0_vlan entered promiscuous mode [ 150.432535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.441454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.451811] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.458267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.465288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.472631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.483108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.496438] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.510352] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.517254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.528072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.535280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.546063] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.557135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.563331] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.574471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.587033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.599086] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.616890] device veth1_vlan entered promiscuous mode [ 150.628205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.636311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.644378] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.650818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.659086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.667046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.675035] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.681514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.688950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.696899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.705238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.716808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.726181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.741175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.754006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.770743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.783587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.802752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.813067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.827210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.839944] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.848562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.856650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.866019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.874797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.885282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.893308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.904642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.916673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.927052] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.941732] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.949054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.960636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.969263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.977042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.985901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.994078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.008970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.021414] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 151.029331] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 151.036520] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 151.050055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.069571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.079521] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.087701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.095927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.105281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.113358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.122499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.131661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.141295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.152217] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.164275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.172985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.187518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.196193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.206942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.216306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.224393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.234799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.244281] device veth0_vlan entered promiscuous mode [ 151.252499] device veth0_macvtap entered promiscuous mode [ 151.261165] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.270860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.278144] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.284336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.293751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.302343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.310263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.318421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.325520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.342398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.348923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.367618] Bluetooth: hci0: command 0x040f tx timeout [ 151.374180] device veth1_macvtap entered promiscuous mode [ 151.381188] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.391616] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 151.400821] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 151.408924] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 151.419279] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.425391] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.437264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.446346] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 151.465315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.474322] device veth1_vlan entered promiscuous mode [ 151.483072] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.490919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.499140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.506548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.515390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.523613] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.527474] Bluetooth: hci1: command 0x040f tx timeout [ 151.530042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.544848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.554881] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.564711] device veth0_vlan entered promiscuous mode [ 151.576877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.588201] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 151.597895] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.604781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.613345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.621501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.629108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.636672] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.651125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.662801] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.672252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.680929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.689245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.696378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.703859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.710826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.719456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.728613] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.734969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.742358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.750453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.762733] device veth1_vlan entered promiscuous mode [ 151.768246] Bluetooth: hci2: command 0x040f tx timeout [ 151.772305] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.788984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.796809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.805253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.816562] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.824635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.834481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.846854] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 151.848017] Bluetooth: hci3: command 0x040f tx timeout [ 151.867254] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.879870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.887014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.899204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.907235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.935358] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 151.950115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.974944] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.984278] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.996881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.006487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.011272] Bluetooth: hci4: command 0x040f tx timeout [ 152.016318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.031102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.034111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.044130] device veth0_macvtap entered promiscuous mode [ 152.045142] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 152.048442] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 152.050829] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 152.053166] device veth0_macvtap entered promiscuous mode [ 152.054116] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 152.056512] device veth1_macvtap entered promiscuous mode [ 152.072581] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 152.073366] device veth1_macvtap entered promiscuous mode [ 152.074304] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 152.077178] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 152.096095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.157920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.167889] Bluetooth: hci5: command 0x040f tx timeout [ 152.175593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.184623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.192298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.200145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.208430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.216192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.224670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.232801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.243344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.252789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.260855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.269264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.276473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.284943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.293034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.301041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.311860] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 152.324673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.343587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.356284] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.365211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.375761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.384340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.394507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.403644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.412481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.424363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.438756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.456237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.472914] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.481131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.499768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.508204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.524029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.533670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.544909] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.552643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.588492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.599760] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 152.613745] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 152.623370] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 152.643319] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 152.653345] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 152.661195] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 152.675397] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 152.690226] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 152.698666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.723475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.742945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.753997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.766042] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.774405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.790100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.798451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.806080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.815416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.824677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.832522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.843082] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 152.851578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 152.863408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.874171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.884303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.895788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.906271] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.913525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.921698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.933073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.941467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.948537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.955349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.963492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.972262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.979954] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.992054] device veth0_vlan entered promiscuous mode [ 153.001226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.019696] device veth0_vlan entered promiscuous mode [ 153.054332] device veth1_vlan entered promiscuous mode [ 153.065676] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 153.111449] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 153.139228] device veth1_vlan entered promiscuous mode [ 153.145624] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 153.202093] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 153.214946] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 153.238595] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 153.253003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.262608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.278220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.285829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.294198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.303172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.317207] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 153.327674] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.339087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.343813] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 153.346349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.370625] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 153.413334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.424926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.446739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.457576] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 153.466611] Bluetooth: hci0: command 0x0419 tx timeout [ 153.476445] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.489294] device veth0_macvtap entered promiscuous mode [ 153.499527] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 153.513339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.525432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.534293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.543971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.552953] device veth0_macvtap entered promiscuous mode [ 153.559988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.561692] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 153.584923] device veth1_macvtap entered promiscuous mode [ 153.600920] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 153.613200] Bluetooth: hci1: command 0x0419 tx timeout [ 153.622785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.636240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.645419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.655508] device veth1_macvtap entered promiscuous mode [ 153.662990] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 153.683455] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 153.691598] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 153.699269] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 153.709475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 153.728898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.758246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 153.766166] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.790552] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 153.800917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.813583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.843429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 153.852674] Bluetooth: hci2: command 0x0419 tx timeout [ 153.854917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 153.870990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.883131] device veth0_vlan entered promiscuous mode [ 153.891834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.906804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 21:05:04 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r4}, 0x8) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r1) dup3(r7, r0, 0x0) [ 153.915119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.928717] Bluetooth: hci3: command 0x0419 tx timeout [ 153.950177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.969402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.979477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.991067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.002975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.013880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.024419] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 154.032189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.050929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.062493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.071965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.081822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.091452] Bluetooth: hci4: command 0x0419 tx timeout [ 154.093265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.108173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.117475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.127215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.138553] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 154.145480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.153656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.161091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.171513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.180660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.190675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.205402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.215862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.225223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.235165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.244562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.254981] Bluetooth: hci5: command 0x0419 tx timeout [ 154.260731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.271660] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 154.279092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.290568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.301493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.312680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.323005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.333028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.343551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.352962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.362891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.373933] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 154.381779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.390857] device veth1_vlan entered promiscuous mode [ 154.397191] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 154.408708] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 21:05:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x87f1a7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) [ 154.420829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.431027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.440108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.449373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.457260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.514510] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 154.555619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.602460] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 154.618718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.625293] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 154.631485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.645067] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 154.675416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.689784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.703872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.712237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.739805] device veth0_macvtap entered promiscuous mode [ 154.746392] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 154.756157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.771447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.827805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.835067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.862690] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 21:05:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [], [0x0, 0xfeedcafe]}}) [ 154.868088] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 154.897477] device veth1_macvtap entered promiscuous mode [ 154.915449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.935191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 154.936913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:05:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x10002e) [ 154.985440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready 21:05:05 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/216) [ 155.029231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.039321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.077178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.092570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.104099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:05:05 executing program 0: open(&(0x7f0000000000)='./bus\x00', 0x143ac2, 0x0) mount(&(0x7f0000000080)=@sg0='/dev/sg0\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x369c00, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x53, 0x85ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x90) [ 155.119611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.135265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.159082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:05:05 executing program 1: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={0x0, 0xa}}, 0x0) [ 155.178505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.199448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:05:05 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r2, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 155.223858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.259215] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 155.267205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.318439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.326553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.362153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.406648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.407091] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 155.429959] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.443491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 21:05:06 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="a87748c4674f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x8100, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}, 0x0) [ 155.477390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.493895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.505019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.526598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.545211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.555461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.574760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.586783] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 155.596976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.608862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.616967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.806100] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 155.816331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.826446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.877592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.913972] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 155.936975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.939107] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 155.950682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.957005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.967901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.972341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.988327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.035472] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 156.042537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.051457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.060917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.136673] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000031 [ 156.148071] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000007d [ 156.167257] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000049 [ 156.182975] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000041 [ 156.198194] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000039 [ 156.218624] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000049 [ 156.252746] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006e [ 156.262323] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000029 [ 156.271058] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000051 [ 156.272261] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 156.282363] kvm [8018]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000003a [ 156.294557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.294567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.295216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.383738] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 156.406112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.431288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.452373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.512541] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.5'. [ 156.525898] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.5'. 21:05:07 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{}]}, 0x10) socket$unix(0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 21:05:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003f00)=@newqdisc={0x15c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x130, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, @TCA_RED_MAX_P={0x8}, @TCA_RED_FLAGS={0xc}]}}]}, 0x15c}}, 0x0) 21:05:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f00000002c0)=0x24f) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200), &(0x7f0000000240)=0xc) 21:05:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000008c0)) 21:05:07 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x11, &(0x7f0000000080), 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 21:05:07 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x40) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e40)={0x2a0, r1, 0x0, 0x70bd28, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x400, @private1={0xfc, 0x1, [], 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @remote, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x69}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "88b56ef939cdc8e4bbc05826f3325710fbd1abe4a88cb7d423"}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x14}, 0x4008804) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736dab457d5b8fa9afec173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e0"], 0x14f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x3ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000140)=0x80000) [ 156.995958] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 157.008596] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 157.014539] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.023656] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.032728] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.042082] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.051099] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.060086] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.069101] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.078178] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.087194] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:07 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0xfe42) [ 157.096287] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.109262] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.118384] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.127449] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r1, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) [ 157.231978] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 157.241494] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 157.247475] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.256755] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.265840] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.274920] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.283981] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.293789] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.302899] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.318782] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@empty}, [@mark={0xc}]}, 0x34}}, 0x0) 21:05:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14f) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioprio_get$pid(0x0, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x4, 0x7fffffd}) 21:05:07 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x11, &(0x7f0000000080), 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 157.327841] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.336854] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.345918] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.355071] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.364202] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:08 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff261427e59aa146ec6e26560000000049d2e181baf9459c5c95394800001d2c0965c08ba8c552fc99a742208f8c6f5c8ba455065ce76fc1d27586b207653872ec51d71458"], 0x186) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e9a9a8dd944aac7035291b061dd0f3f1d9f658f54ec7e8e413132fc875ccf46befb0d0777000f622dd7921c871024377b10035dbbd39ed68eec092d50882305b06ad2a2bfb7365906a206ad3677caf44832a31fc26c8a83a65b7d3769fbcd4be4a6fdccacea000000000000"], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x20000000) 21:05:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="675f07000005eb301220000097f1ac1dea61a7a765760136f300000000007d7cff30f341089c28409259007607b4be9cf2840749a68af200000000800000009af7509a18771b61b8a971ca5aa77c06f83003d8f8ba48ac2f89ac97513616cad8944a033e60862f", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 157.499931] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 157.501071] sd 0:0:1:0: [sg0] tag#8066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 157.511998] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 157.520673] sd 0:0:1:0: [sg0] tag#8066 CDB: Test Unit Ready [ 157.526418] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.532181] sd 0:0:1:0: [sg0] tag#8066 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.541120] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.550042] sd 0:0:1:0: [sg0] tag#8066 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.558987] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.567857] sd 0:0:1:0: [sg0] tag#8066 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.576720] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.585666] sd 0:0:1:0: [sg0] tag#8066 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.594579] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.603485] sd 0:0:1:0: [sg0] tag#8066 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.617798] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.628017] sd 0:0:1:0: [sg0] tag#8066 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.635245] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.644075] sd 0:0:1:0: [sg0] tag#8066 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.652998] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.661978] sd 0:0:1:0: [sg0] tag#8066 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.671781] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.680724] sd 0:0:1:0: [sg0] tag#8066 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.689741] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.698684] sd 0:0:1:0: [sg0] tag#8066 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.707565] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.718754] ================================================================================ [ 157.718825] UBSAN: Undefined behaviour in ./include/net/red.h:272:18 [ 157.718836] shift exponent 174 is too large for 64-bit type 'long unsigned int' [ 157.718851] CPU: 1 PID: 8106 Comm: syz-executor.5 Not tainted 4.19.147-syzkaller #0 [ 157.718857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.718862] Call Trace: [ 157.718868] [ 157.718887] dump_stack+0x22c/0x33e [ 157.718907] ubsan_epilogue+0xe/0x3a [ 157.718922] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 157.718936] ? mark_held_locks+0xa6/0xf0 [ 157.718955] ? kvm_clock_get_cycles+0x14/0x30 [ 157.718969] ? ktime_get+0x21b/0x320 [ 157.718986] red_adaptative_timer+0x7ed/0x870 [ 157.719005] call_timer_fn+0x177/0x760 [ 157.719017] ? hfsc_dump_class.cold+0x41/0x41 [ 157.719030] ? init_timer_key+0x370/0x370 [ 157.719048] ? _raw_spin_unlock_irq+0x24/0x90 [ 157.719064] ? hfsc_dump_class.cold+0x41/0x41 [ 157.719077] expire_timers+0x243/0x500 [ 157.719094] run_timer_softirq+0x259/0x730 [ 157.719110] ? expire_timers+0x500/0x500 [ 157.719126] ? mac80211_hwsim_beacon+0x171/0x1b0 [ 157.719151] __do_softirq+0x27d/0xad2 [ 157.719177] irq_exit+0x22d/0x270 [ 157.719191] smp_apic_timer_interrupt+0x15f/0x5d0 [ 157.719206] apic_timer_interrupt+0xf/0x20 [ 157.719212] [ 157.719225] RIP: 0010:vprintk_emit+0x6a0/0x7c0 [ 157.719239] Code: 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 0f 85 10 01 00 00 48 83 3d 64 5e 08 08 00 74 60 e8 95 97 16 00 4c 89 ff 57 9d <0f> 1f 44 00 00 e9 5c fe ff ff e8 81 97 16 00 0f 0b 48 c7 c7 80 11 [ 157.719247] RSP: 0018:ffff888046dbeb98 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 157.719259] RAX: 0000000000040000 RBX: 0000000000000200 RCX: ffffc9001059d000 [ 157.719266] RDX: 0000000000040000 RSI: ffffffff815b2b4b RDI: 0000000000000246 [ 157.719274] RBP: ffff888046dbebd8 R08: 00000000746da9a2 R09: 0000000000000000 [ 157.719281] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000053 [ 157.719288] R13: 1ffffffff12c7135 R14: ffff888046d846c0 R15: 0000000000000246 [ 157.719309] ? vprintk_emit+0x69b/0x7c0 [ 157.719334] dev_vprintk_emit+0x2e3/0x640 [ 157.719353] ? device_create_with_groups+0x120/0x120 [ 157.719382] ? skip_atoi+0xab/0xe0 [ 157.719394] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 157.719407] ? simple_strtoull+0x110/0x110 [ 157.719419] ? format_decode+0x232/0xca0 [ 157.719439] dev_printk_emit+0xbb/0xf0 [ 157.719452] ? dev_vprintk_emit+0x640/0x640 [ 157.719468] ? vsnprintf+0x2cc/0x14f0 [ 157.719490] __dev_printk+0x108/0x260 [ 157.719506] dev_printk+0xd1/0x110 [ 157.719519] ? __dev_printk+0x260/0x260 [ 157.719531] ? scnprintf+0xd6/0x140 21:05:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x17) [ 157.719544] ? bstr_printf+0xea0/0xea0 [ 157.719563] ? hex_dump_to_buffer+0x4f6/0xd40 [ 157.719587] scsi_print_command+0x5db/0x77c [ 157.719609] scsi_io_completion+0x1240/0x1870 [ 157.719626] ? rcu_is_watching+0x7c/0x100 [ 157.719638] ? scsi_end_request+0xbd0/0xbd0 [ 157.719651] ? scsi_device_unbusy+0xa8/0xf0 [ 157.719669] scsi_softirq_done+0x336/0x3d0 [ 157.719680] ? check_preemption_disabled+0x41/0x2b0 [ 157.719699] blk_mq_complete_request+0x472/0x660 [ 157.719713] scsi_dispatch_cmd+0x55a/0xc40 [ 157.719728] scsi_queue_rq+0x1477/0x1aa0 [ 157.719748] blk_mq_dispatch_rq_list+0xcf4/0x1a00 [ 157.719763] ? lock_acquire+0x170/0x3f0 [ 157.719777] ? dd_dispatch_request+0x98/0x8ac [ 157.719793] ? blk_mq_get_driver_tag+0x620/0x620 [ 157.719806] ? _raw_spin_unlock+0x29/0x40 [ 157.719818] ? dd_dispatch_request+0x21c/0x8ac [ 157.719829] ? scsi_mq_get_budget+0x14d/0x3a0 [ 157.719846] blk_mq_do_dispatch_sched+0x187/0x400 [ 157.719864] ? blk_mq_sched_free_hctx_data+0x1f0/0x1f0 [ 157.719886] blk_mq_sched_dispatch_requests+0x389/0x5b0 [ 157.719899] ? lock_acquire+0x170/0x3f0 [ 157.719912] ? blk_mq_sched_restart+0x70/0x70 [ 157.719924] ? check_preemption_disabled+0x41/0x2b0 [ 157.719938] ? rcu_is_watching+0x7c/0x100 [ 157.719956] __blk_mq_run_hw_queue+0x185/0x290 [ 157.719969] ? hctx_lock+0x1e0/0x1e0 [ 157.719981] ? retint_kernel+0x2d/0x2d [ 157.719996] ? check_preemption_disabled+0x41/0x2b0 [ 157.720012] __blk_mq_delay_run_hw_queue+0x4d8/0x5a0 [ 157.720031] blk_mq_run_hw_queue+0x16b/0x2f0 [ 157.720046] ? blk_mq_delay_run_hw_queue+0x30/0x30 [ 157.720069] blk_mq_sched_insert_request+0x368/0x760 [ 157.720086] ? __blk_mq_sched_bio_merge+0x560/0x560 [ 157.720109] blk_execute_rq_nowait+0x194/0x350 [ 157.720121] ? sg_add_request+0x380/0x380 [ 157.720136] sg_common_write.constprop.0+0xfb0/0x2110 [ 157.720160] ? sg_remove_request.isra.0+0x250/0x250 [ 157.720176] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 157.720191] ? rcu_nmi_exit+0x102/0x220 [ 157.720205] ? retint_kernel+0x2d/0x2d [ 157.720230] sg_new_write.isra.0+0x6f4/0xa10 [ 157.720248] ? sg_rq_end_io_usercontext+0x90/0x90 [ 157.720280] ? lock_downgrade+0x750/0x750 [ 157.720291] ? lock_acquire+0x170/0x3f0 [ 157.720304] ? __might_fault+0xef/0x1d0 [ 157.720324] sg_write.part.0+0xa53/0xe10 [ 157.720340] ? futex_wait_setup+0x300/0x300 [ 157.720353] ? sg_new_write.isra.0+0xa10/0xa10 [ 157.720374] ? __lock_acquire+0x6ec/0x3ff0 [ 157.720392] ? __lock_acquire+0x6ec/0x3ff0 [ 157.720413] ? mark_held_locks+0xf0/0xf0 [ 157.720430] ? mark_held_locks+0xf0/0xf0 [ 157.720442] ? do_futex+0x163/0x1c60 [ 157.720465] sg_write+0x45/0x70 [ 157.720480] __vfs_write+0xf7/0x770 [ 157.720492] ? sg_write.part.0+0xe10/0xe10 [ 157.720506] ? kernel_read+0x110/0x110 [ 157.720523] ? __inode_security_revalidate+0xef/0x140 [ 157.720539] ? avc_policy_seqno+0x9/0x70 [ 157.720551] ? selinux_file_permission+0xc1/0x5a0 [ 157.720569] ? security_file_permission+0x1c0/0x230 [ 157.720587] vfs_write+0x1f3/0x540 [ 157.720604] ksys_write+0x12b/0x2a0 [ 157.720618] ? __ia32_sys_read+0xb0/0xb0 [ 157.720632] ? trace_hardirqs_off_caller+0x69/0x210 [ 157.720646] ? do_syscall_64+0x21/0x670 [ 157.720663] do_syscall_64+0xf9/0x670 [ 157.720679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.720689] RIP: 0033:0x45e179 [ 157.720703] Code: 3d b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b b2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.720710] RSP: 002b:00007f96f4ea9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.720722] RAX: ffffffffffffffda RBX: 0000000000039680 RCX: 000000000045e179 [ 157.720730] RDX: 0000000000000186 RSI: 00000000200002c0 RDI: 0000000000000004 [ 157.720737] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 157.720744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 157.720751] R13: 00007fffc7acbeff R14: 00007f96f4eaa9c0 R15: 000000000118cf4c [ 157.720771] ================================================================================ [ 157.722411] sd 0:0:1:0: [sg0] tag#8066 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.732207] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.739641] sd 0:0:1:0: [sg0] tag#8066 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 157.746160] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 [ 157.753689] sd 0:0:1:0: [sg0] tag#8066 CDB[c0]: 00 00 00 00 00 00 00 00 [ 157.895671] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 158.076292] hrtimer: interrupt took 55765 ns [ 158.080364] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 158.286837] sd 0:0:1:0: [sg0] tag#8066 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 158.292455] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292496] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292537] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000005a00010a0000000000000000000000000a0003"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:05:09 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x11, &(0x7f0000000080), 0x8) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 158.292577] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292616] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292652] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292692] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.292728] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.296531] sd 0:0:1:0: [sg0] tag#8066 CDB: Test Unit Ready [ 158.300684] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.305822] sd 0:0:1:0: [sg0] tag#8066 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.309783] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.313702] sd 0:0:1:0: [sg0] tag#8066 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.318897] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.322158] sd 0:0:1:0: [sg0] tag#8066 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.343442] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.343483] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 [ 158.620409] sd 0:0:1:0: [sg0] tag#8066 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.629577] sd 0:0:1:0: [sg0] tag#8066 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.642382] sd 0:0:1:0: [sg0] tag#8066 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.651435] sd 0:0:1:0: [sg0] tag#8066 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.660387] sd 0:0:1:0: [sg0] tag#8066 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.669335] sd 0:0:1:0: [sg0] tag#8066 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.678275] sd 0:0:1:0: [sg0] tag#8066 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.687179] sd 0:0:1:0: [sg0] tag#8066 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.696144] sd 0:0:1:0: [sg0] tag#8066 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:09 executing program 5: unshare(0x2040400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xb58691dd3630356c, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 158.705136] sd 0:0:1:0: [sg0] tag#8066 CDB[c0]: 00 00 00 00 00 00 00 00 21:05:09 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) sendmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:05:09 executing program 5: rt_sigprocmask(0x0, &(0x7f0000000180)={[0xfffffffffffffffb]}, 0x0, 0x8) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x9, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) 21:05:09 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) 21:05:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 21:05:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0xe9a}]}) 21:05:09 executing program 4: munmap(&(0x7f0000fec000/0x13000)=nil, 0x13000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) 21:05:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20c301e2, r3}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 21:05:11 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 21:05:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 21:05:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x2}]}]}]}}]}, 0x44}}, 0x0) 21:05:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:11 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) accept(r0, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 21:05:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) [ 160.538626] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 160.541517] audit: type=1400 audit(1601067911.123:9): avc: denied { create } for pid=8204 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 160.556073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.601878] audit: type=1400 audit(1601067911.163:10): avc: denied { name_bind } for pid=8204 comm="syz-executor.5" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 160.627187] audit: type=1400 audit(1601067911.163:11): avc: denied { node_bind } for pid=8204 comm="syz-executor.5" src=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 160.656696] audit: type=1400 audit(1601067911.213:12): avc: denied { name_connect } for pid=8204 comm="syz-executor.5" dest=20003 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 21:05:11 executing program 5: r0 = socket(0x15, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x114, 0x2721, 0x0, 0x53a000) 21:05:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x37}) 21:05:11 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x81002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x3) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r1, &(0x7f0000000080)=""/210, 0xd2) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 21:05:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x58}}, 0x0) 21:05:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1772fee6968503bfc80bab590a0edaf", 0xe0}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0xffffffff}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:05:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x8, [@typedef, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], '\x00'}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xa8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 161.105474] team0: Port device team_slave_0 removed [ 161.114865] bond0: Enslaving team_slave_0 as an active interface with an up link [ 161.123921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.142150] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 161.180728] syz-executor.0 (8218) used greatest stack depth: 22376 bytes left 21:05:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x5, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x39e1db82}, 0x8) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x10000, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) 21:05:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[], 0x10132) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0) 21:05:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 21:05:12 executing program 4: unshare(0x400) r0 = socket(0x11, 0x800000003, 0x0) getpeername$packet(r0, 0x0, 0x0) [ 161.458796] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 161.464149] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 161.475535] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 161.482150] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.496865] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.509958] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.519214] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.528248] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.537254] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.546298] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.555323] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.564464] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.573535] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.582607] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.591664] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010405000000000000000000000040000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000010401080000000000000000000000000500010001"], 0x1c}}, 0x0) close(r2) [ 161.600739] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 [ 161.628540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.643276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.652801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.667871] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 161.676710] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 161.682950] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.692219] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.701335] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.713817] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.722880] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.731890] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.740917] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.749930] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.758963] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.767998] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.776992] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.786201] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.795279] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 [ 161.804434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.832054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.844639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.860614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.872176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:05:12 executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000200)={@broadcast, @random="5488a96aaa23", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x68, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x1, "000000000000000000fac600"}]}}}}}}, 0x0) [ 161.884928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.897168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.911809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.924810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:05:12 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 161.941101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.951466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.963586] bond0: batadv_slave_0 is up - this may be due to an out of date ifenslave 21:05:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xffffffffffffffff) 21:05:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000580)={0x2, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 21:05:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x28, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 162.151725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.170676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1772fee6968503bfc80bab590a0edaf", 0xe0}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0xffffffff}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:05:14 executing program 4: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000004c0), 0x10) 21:05:14 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 21:05:14 executing program 3: unshare(0x20000400) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x40000800, 0x0) ioctl$EVIOCSFF(r0, 0x80084503, 0x0) 21:05:14 executing program 1: r0 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_GETBIND(r0, 0xac00, 0x0) 21:05:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 21:05:14 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 21:05:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) 21:05:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x406100) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)="26fa6493cfaebb16fa4aea7fe2220b2d41", 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) listen(0xffffffffffffffff, 0xb88) fsetxattr(r1, 0x0, 0x0, 0x0, 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1000, 0x1) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "dd53567abdeecc5a0b9e8c6d6059b28ed6a7a82e61330935b82bf57af2f74b09", 0x2, 0x1}) fallocate(r2, 0x100000003, 0x1008, 0x240000) 21:05:14 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) [ 164.376466] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 164.376571] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 164.391825] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.400910] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.416644] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.425704] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.434729] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.443758] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.446845] audit: type=1800 audit(1601067915.023:13): pid=8330 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15812 res=0 [ 164.452750] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.486046] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.486133] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.504105] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.513171] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:05:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) 21:05:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) [ 164.522261] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.531432] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.540509] sd 0:0:1:0: [sg0] tag#8071 CDB[d0]: 00 00 00 00 [ 164.589611] sd 0:0:1:0: [sg0] tag#8071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 164.589728] sd 0:0:1:0: [sg0] tag#8071 CDB: Test Unit Ready [ 164.589810] sd 0:0:1:0: [sg0] tag#8071 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.589920] sd 0:0:1:0: [sg0] tag#8071 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590005] sd 0:0:1:0: [sg0] tag#8071 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590101] sd 0:0:1:0: [sg0] tag#8071 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590192] sd 0:0:1:0: [sg0] tag#8071 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590286] sd 0:0:1:0: [sg0] tag#8071 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590383] sd 0:0:1:0: [sg0] tag#8071 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590466] sd 0:0:1:0: [sg0] tag#8071 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590562] sd 0:0:1:0: [sg0] tag#8071 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590661] sd 0:0:1:0: [sg0] tag#8071 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590760] sd 0:0:1:0: [sg0] tag#8071 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590870] sd 0:0:1:0: [sg0] tag#8071 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.590945] sd 0:0:1:0: [sg0] tag#8071 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.591035] sd 0:0:1:0: [sg0] tag#8071 CDB[d0]: 00 00 00 00 21:05:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1772fee6968503bfc80bab590a0edaf", 0xe0}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0xffffffff}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:05:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x6, @sdr}) 21:05:17 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 21:05:17 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0xac}, {0x5}, {0x6}]}) 21:05:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) 21:05:17 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 21:05:17 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 21:05:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000e45000/0x3000)=nil, 0x3) socket$unix(0x1, 0x0, 0x0) 21:05:17 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) [ 166.992119] audit: type=1326 audit(1601067917.573:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8375 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460fba code=0x0 [ 167.019140] mmap: syz-executor.0 (8390) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 21:05:17 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 21:05:17 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) 21:05:17 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)