Warning: Permanently added '10.128.1.7' (ECDSA) to the list of known hosts. 2020/02/01 19:05:20 fuzzer started 2020/02/01 19:05:23 dialing manager at 10.128.0.26:33247 2020/02/01 19:05:23 syscalls: 2939 2020/02/01 19:05:23 code coverage: enabled 2020/02/01 19:05:23 comparison tracing: enabled 2020/02/01 19:05:23 extra coverage: enabled 2020/02/01 19:05:23 setuid sandbox: enabled 2020/02/01 19:05:23 namespace sandbox: enabled 2020/02/01 19:05:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/01 19:05:23 fault injection: enabled 2020/02/01 19:05:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/01 19:05:23 net packet injection: enabled 2020/02/01 19:05:23 net device setup: enabled 2020/02/01 19:05:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/02/01 19:05:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 19:08:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) open$dir(0x0, 0x0, 0x0) 19:08:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x80010000, 0x0) syzkaller login: [ 270.270826][ T9643] IPVS: ftp: loaded support on port[0] = 21 [ 270.449987][ T9643] chnl_net:caif_netlink_parms(): no params data found 19:08:13 executing program 2: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 270.499797][ T9646] IPVS: ftp: loaded support on port[0] = 21 [ 270.528762][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.537467][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.565656][ T9643] device bridge_slave_0 entered promiscuous mode [ 270.576382][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.593337][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.611517][ T9643] device bridge_slave_1 entered promiscuous mode [ 270.697619][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.718183][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.750837][ T9643] team0: Port device team_slave_0 added [ 270.768678][ T9650] IPVS: ftp: loaded support on port[0] = 21 [ 270.785857][ T9643] team0: Port device team_slave_1 added 19:08:13 executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r2, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c02630dffffa328b47ca8a88a37877b11345ed9cc0542607d85309662bd845011399e970800d8fcb3f6217eb878cd015763", 0x40, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r3, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c02630dffffa328b47ca8a88a37877b11345ed9cc0542607d85309662bd845011399e970800d8fcb3f6217eb878cd015763", 0x40, 0x0, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) recvfrom(r2, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000180)=@hci={0x1f, 0x1, 0x1}, 0x80) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x62e400, 0x0) getsockname(r4, &(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x80) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x1, 0x0, 0x1}, 0x4}}, 0x18) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x2}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x6}) getgid() [ 270.857572][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.864994][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.893281][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.928961][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.936598][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.964688][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.012964][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 271.066526][ T9643] device hsr_slave_0 entered promiscuous mode [ 271.113714][ T9643] device hsr_slave_1 entered promiscuous mode 19:08:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x10000008000001e) open$dir(0x0, 0x0, 0x0) [ 271.252324][ T9653] IPVS: ftp: loaded support on port[0] = 21 [ 271.483909][ T9657] IPVS: ftp: loaded support on port[0] = 21 19:08:14 executing program 5: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x40a, 0x4) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000018efdadbabef98c18492aaa820d71b280300c3d94e1daf50c103ee7ecfc2f92265c7718e606f0b72630df7558695d97ed87dd4ac99f4532c", @ANYRES16=r7, @ANYBLOB="000827bd7000ffdbdf2501000000000000000c4100"], 0x3}, 0x1, 0xfffffff0, 0x0, 0x48880}, 0x20040881) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 271.534038][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.541184][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.549590][ T9646] device bridge_slave_0 entered promiscuous mode [ 271.589650][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.597117][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.605513][ T9646] device bridge_slave_1 entered promiscuous mode [ 271.620067][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 271.670470][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.731857][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.819398][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.826628][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.835126][ T9650] device bridge_slave_0 entered promiscuous mode [ 271.842422][ T9643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.898917][ T9646] team0: Port device team_slave_0 added [ 271.907323][ T9646] team0: Port device team_slave_1 added [ 271.926741][ T9661] IPVS: ftp: loaded support on port[0] = 21 [ 271.928154][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.943217][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.951780][ T9650] device bridge_slave_1 entered promiscuous mode [ 271.959882][ T9643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.023430][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.030413][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.058329][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.072204][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.081199][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.108232][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.126601][ T9643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.185725][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 272.215722][ T9643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.277873][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.355273][ T9646] device hsr_slave_0 entered promiscuous mode [ 272.395655][ T9646] device hsr_slave_1 entered promiscuous mode [ 272.433542][ T9646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.441395][ T9646] Cannot create hsr debugfs directory [ 272.485599][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.552685][ T9650] team0: Port device team_slave_0 added [ 272.569656][ T9650] team0: Port device team_slave_1 added [ 272.579394][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 272.624599][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.631714][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.640366][ T9653] device bridge_slave_0 entered promiscuous mode [ 272.650628][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.657858][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.665611][ T9653] device bridge_slave_1 entered promiscuous mode [ 272.672988][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.680535][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.706700][ T9650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.768010][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.777971][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.804499][ T9650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.832682][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.884328][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.930801][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.938115][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.946740][ T9657] device bridge_slave_0 entered promiscuous mode [ 273.006549][ T9650] device hsr_slave_0 entered promiscuous mode [ 273.053902][ T9650] device hsr_slave_1 entered promiscuous mode [ 273.093360][ T9650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.100949][ T9650] Cannot create hsr debugfs directory [ 273.110804][ T9661] chnl_net:caif_netlink_parms(): no params data found [ 273.124019][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.131107][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.140094][ T9657] device bridge_slave_1 entered promiscuous mode [ 273.159251][ T9653] team0: Port device team_slave_0 added [ 273.170812][ T9653] team0: Port device team_slave_1 added [ 273.234168][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.241168][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.267182][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.286689][ T9646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.379358][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.397810][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.405159][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.431565][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.442874][ T9646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.525185][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.544555][ T9646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.620243][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.646871][ T9646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.786684][ T9653] device hsr_slave_0 entered promiscuous mode [ 273.826125][ T9653] device hsr_slave_1 entered promiscuous mode [ 273.863440][ T9653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.871066][ T9653] Cannot create hsr debugfs directory [ 273.881995][ T9657] team0: Port device team_slave_0 added [ 273.906945][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.914305][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.922170][ T9661] device bridge_slave_0 entered promiscuous mode [ 273.935594][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.942697][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.951503][ T9661] device bridge_slave_1 entered promiscuous mode [ 273.960462][ T9657] team0: Port device team_slave_1 added [ 273.970482][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.979174][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.009643][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.082411][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.090093][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.116342][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.129660][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.138608][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.147922][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.155210][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.174679][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.189659][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.200459][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.208110][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.234467][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.254765][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.263705][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.272353][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.280887][ T2745] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.288005][ T2745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.296778][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.395936][ T9657] device hsr_slave_0 entered promiscuous mode [ 274.454204][ T9657] device hsr_slave_1 entered promiscuous mode [ 274.513376][ T9657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.520964][ T9657] Cannot create hsr debugfs directory [ 274.527227][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.537148][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.545851][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.558060][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.577792][ T9661] team0: Port device team_slave_0 added [ 274.587874][ T9661] team0: Port device team_slave_1 added [ 274.606643][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.615256][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.634844][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.644175][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.652833][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.661593][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.688805][ T9650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.746483][ T9643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.773696][ T9650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.826864][ T9650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.889713][ T9650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.962647][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.972291][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.000497][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.042252][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.049696][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.075977][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.127538][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.135261][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.144987][ T9653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.180325][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.246836][ T9661] device hsr_slave_0 entered promiscuous mode [ 275.293887][ T9661] device hsr_slave_1 entered promiscuous mode [ 275.373457][ T9661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.381049][ T9661] Cannot create hsr debugfs directory [ 275.395600][ T9653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.460032][ T9643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.486789][ T9653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.526750][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.534746][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.546064][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.575638][ T9653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.671374][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.680444][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.689507][ T2751] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.696632][ T2751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.705888][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.762796][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.771982][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.781343][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.790425][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.799288][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.806402][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.859823][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.888936][ T9657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.940728][ T9657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.005640][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.024618][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.034713][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.043698][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.052301][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.061138][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.069451][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.089402][ T9657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.148669][ T9643] device veth0_vlan entered promiscuous mode [ 276.164128][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.172106][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.182042][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.190299][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.198945][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.212384][ T9657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.261562][ T9646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.273612][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.290546][ T9643] device veth1_vlan entered promiscuous mode [ 276.305940][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.315697][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.325093][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.387242][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.423202][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.431950][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.440322][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.450042][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.458204][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.475435][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.492423][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.505283][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.533183][ T9661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.585637][ T9653] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.592897][ T9661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.624888][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.637901][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.646530][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.654153][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.661918][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.670735][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.679187][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.686308][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.693883][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.701654][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.712934][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.739584][ T9643] device veth0_macvtap entered promiscuous mode [ 276.757750][ T9661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.826792][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.836534][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.846426][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.855639][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.864763][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.873179][ T2806] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.880317][ T2806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.888540][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.897502][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.905811][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.923320][ T9643] device veth1_macvtap entered promiscuous mode [ 276.934771][ T9661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.977690][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.986218][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.995423][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.004876][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.011923][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.019959][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.028816][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.039902][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.063769][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.097059][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.108059][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.119719][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.128585][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.137647][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.147249][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.156518][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.166310][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.175654][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.185081][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.200750][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.219823][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.244499][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.253622][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.261948][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.271171][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.284004][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.292346][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.301022][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.309886][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.319061][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.327871][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.336409][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.345037][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.353883][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.361718][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.391124][ T9646] device veth0_vlan entered promiscuous mode [ 277.407439][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.421309][ T9650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.437000][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.445397][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.454611][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.465370][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.499328][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.509921][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.550170][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.558108][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.565998][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.611747][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.628517][ T9646] device veth1_vlan entered promiscuous mode [ 277.656910][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.667454][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.676354][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.684488][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.699670][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.814792][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.831676][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.841463][ T2745] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.848605][ T2745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.857475][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.866396][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.874936][ T2745] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.881983][ T2745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.889866][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.898836][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.929746][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.953984][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.961938][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.971138][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.979718][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.989166][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.998652][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.008477][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.021538][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.042343][ T9646] device veth0_macvtap entered promiscuous mode [ 278.086581][ T9650] device veth0_vlan entered promiscuous mode [ 278.099848][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.108342][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.125758][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.134036][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.142715][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.151840][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.161411][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.168139][ C0] hrtimer: interrupt took 45367 ns [ 278.170679][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.183478][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.207203][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.219512][ T9646] device veth1_macvtap entered promiscuous mode [ 278.256755][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.285613][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.306462][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.315372][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.323855][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.354148][ T9650] device veth1_vlan entered promiscuous mode [ 278.373856][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.385148][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.393125][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 19:08:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) open$dir(0x0, 0x0, 0x0) [ 278.401780][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.411511][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.422966][ T2747] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.430113][ T2747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.464998][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.486402][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.495137][ T2747] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.502219][ T2747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.510050][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.519430][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.528334][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.556122][ T9653] device veth0_vlan entered promiscuous mode [ 278.577998][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.589145][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.598355][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.607560][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.616528][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.626770][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.636647][ T2751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.647001][ T9657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.664542][ T9653] device veth1_vlan entered promiscuous mode [ 278.693550][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.704783][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:08:21 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0xa000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0}, 0x18) [ 278.717909][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.726021][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.735646][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.748156][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 19:08:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='sessionid\x00') sendmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x298, 0x0, 0x0, "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"}], 0x298}, 0x4) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xbf, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 278.772378][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.781593][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.790753][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.821543][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.847454][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.880925][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.907196][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.919499][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.932031][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.000813][ T9661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.012564][ T9650] device veth0_macvtap entered promiscuous mode [ 279.028778][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.049002][ T9646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.067548][ T9646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.088771][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 19:08:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='sessionid\x00') sendmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x298, 0x0, 0x0, "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"}], 0x298}, 0x4) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xbf, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 279.128315][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.142504][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.152940][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.189687][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.223048][ T9650] device veth1_macvtap entered promiscuous mode [ 279.305730][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.318231][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.330745][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.392191][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.437007][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.460818][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.470933][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.481853][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.506932][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.525002][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 19:08:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000003980)={0x3}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x41f23cb850c56074, 0x80, &(0x7f0000000640)="c0df03011bf16c5895310859487f3d102e88439e3001af3e5031c3083b240b61ca18e5eaccfa6e870c892e81e668ffba4b081b36da22111cdae2654f5a39e79fdec62adb93ae98954e50e13c3637bd7b587535db91f7417ef9a9fcea393817335424feb0f2eeea55b02978e5b397b0a94eff5cc6bbeb4103bf3f9231dcdd7ab8"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 279.538343][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.550827][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.560406][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.573138][ T9653] device veth0_macvtap entered promiscuous mode [ 279.597960][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.623320][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.633177][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.659875][ T9702] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 279.677958][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.690749][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.710274][ T9653] device veth1_macvtap entered promiscuous mode [ 279.723008][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.734474][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.742621][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.751915][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:08:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)=0x3) [ 279.863093][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.902773][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.912976][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.926348][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.937390][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.948194][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.960199][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.017326][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.030927][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.064899][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.081146][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:08:22 executing program 0: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 280.104928][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.126133][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.136103][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.146809][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.158847][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.224913][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.237369][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:08:22 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x145042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x1}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x2081fc) r4 = open(&(0x7f0000000240)='./file0\x00', 0x20141042, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800002, 0x11, r4, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) [ 280.273198][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.284952][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.360632][ T27] audit: type=1800 audit(1580584102.937:31): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16520 res=0 [ 280.398549][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 19:08:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="12"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045505, &(0x7f0000000100)) [ 280.414678][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.527243][ T9661] device veth0_vlan entered promiscuous mode [ 280.538392][ T9735] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 [ 280.556126][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.565443][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.572924][ T9738] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 [ 280.574083][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.591321][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.611048][ T27] audit: type=1800 audit(1580584103.187:32): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16520 res=0 [ 280.623875][ T9661] device veth1_vlan entered promiscuous mode [ 280.693285][ T9657] device veth0_vlan entered promiscuous mode [ 280.701900][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.710947][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.720084][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.730024][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.738398][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.796294][ T9657] device veth1_vlan entered promiscuous mode [ 280.848003][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.858608][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.867196][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.875743][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.884786][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.900034][ T9661] device veth0_macvtap entered promiscuous mode [ 280.926288][ T9661] device veth1_macvtap entered promiscuous mode [ 280.945344][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.959859][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.969937][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.978980][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.994267][ T9657] device veth0_macvtap entered promiscuous mode [ 281.005582][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.019561][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.030079][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.041001][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.051597][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.063987][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.073922][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.084962][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.096653][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.108826][ T9657] device veth1_macvtap entered promiscuous mode [ 281.117671][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.126840][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.135057][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.144307][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.155226][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.167954][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.178138][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.188729][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.199916][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.210365][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.220260][ T9661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.230908][ T9661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.242317][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.257476][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.266524][ T2820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.297324][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.311945][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.322333][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.337390][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.347375][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.358531][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.369003][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.380513][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.390773][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.401277][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.412795][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.474798][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.488085][ T2747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.501109][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.514416][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.524616][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.535137][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.545011][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.555528][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.565388][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.575873][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.585743][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.598695][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.611160][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_1 19:08:24 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) close(r0) [ 281.631821][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.641147][ T2745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:08:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x180, 0x0, 0x0, "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"}], 0x180}, 0x4) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xbf, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 19:08:25 executing program 5: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x40a, 0x4) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000018efdadbabef98c18492aaa820d71b280300c3d94e1daf50c103ee7ecfc2f92265c7718e606f0b72630df7558695d97ed87dd4ac99f4532c", @ANYRES16=r7, @ANYBLOB="000827bd7000ffdbdf2501000000000000000c4100"], 0x3}, 0x1, 0xfffffff0, 0x0, 0x48880}, 0x20040881) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 19:08:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000003980)={0x3}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 19:08:25 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:08:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x10000008000001e) open$dir(0x0, 0x0, 0x0) 19:08:25 executing program 3: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x8, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000480)="6537493f8c1fa17570ccc646baba07d10e5e861c78bdc2d6836a75094b2026903343bd1fa5f283f9b0d4cd644694d0d226b845100456193d95e74bf86fc41040f1372d", 0x43, 0x7}, {&(0x7f0000000500)="b2a31a0e40bca3d48b305ed2095300"/25, 0x19}, {&(0x7f0000000540)="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", 0x236}, {&(0x7f0000000b40)="1b3f095dfffdcabc51bb6216f279d8eaf0c0b6f9c0828336c76758e08db1e400c5d5fc0884daa58457cd878896da7c3deab48f2754604ef6bbb02b86fedc64a32fe6afbdc3d542399ef285e135679aa8cac80ab40697502d6afe31f5951de92ddb4728f998f209d65672c28826a40af359581e1fa15f4a05477ef079d2e081d23a5f07fc9d765143de42ad016b4daf85f78cb7bdb581b846703cbffcb37afd2d01c13202667adcb9bcf523115b9e1301679db8", 0xb3, 0xe5}, {&(0x7f0000000c40)="8eca098d821745e7f6c4ca5ae698f4ce65b5b6b4c06b1a7589a9b1509b435cc9a8a3c5ccde179a2421d69868a4eb70c97ef4a0bdb811a5049091173fe6e66ea52740592e3d4d4bc70f3ea11280008794cec2c21db8ff32c09543ecc611c1f294016e946e1a198cea88ac1738dfda793f7944625f477b168a360c9a", 0x7b, 0x401}, {&(0x7f0000000cc0)="fe11c12521a6a7c94f371821a5690eefd3fe71c3badb13f00dda60354948b2df11a525720dd3e22edfb7683f7a6c20e2460b5eba3822a8e44aabd9cf266dfc8484fb3c724e414b1e82d0f2bbefd8449d786fc5fcdf4c2867cf7b440684604d8d2e194f521126988563cc5c26cfe9866ea87bd443446aad75f000597a559cfb998576b6990e8789bc99dc96335dccd94a4a26ecd1175597d4aed2f18845712e2430125af574a899716dc3fab8220df724a43c075fce8136ae5f5f0a87df28ca69ff66dbf938ad8c622f135880ae58c0e63abdda3773874bfb", 0xd8, 0xf6ef}, {&(0x7f0000000dc0)="0cc22d8b921d1665482033eb66fce31a906c6f1db07fc88d957f82a1615c1238674698228c6a9daa6a5fbfa094", 0xffffffffffffff24}], 0x0, &(0x7f0000000780)={[{@norock='norock'}, {@block={'block'}}, {@map_acorn='map=acorn'}, {@map_normal='map=normal'}, {@nojoliet='nojoliet'}, {@session={'session'}}, {@uid={'uid'}}, {@dmode={'dmode'}}]}) 19:08:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20982) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:08:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=intepleave=']) 19:08:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) 19:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xe, 0x0, 0x2c, &(0x7f0000000180)="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"}) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x33, 0x7, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, [{}]}, 0x1a6) [ 283.232735][ T9797] tmpfs: Bad value for 'mpol' 19:08:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19:08:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x10000008000001e) open$dir(0x0, 0x0, 0x0) [ 283.444563][ T9797] tmpfs: Bad value for 'mpol' 19:08:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000100)) [ 283.596444][ T9814] EXT4-fs (sda1): re-mounted. Opts: (null) 19:08:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20400) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 19:08:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) [ 283.687486][ T9816] EXT4-fs (sda1): re-mounted. Opts: (null) 19:08:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=i']) 19:08:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) [ 283.884190][ T9829] usb usb2: usbfs: process 9829 (syz-executor.3) did not claim interface 0 before use 19:08:26 executing program 4: ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x7, 0x10000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000300)=0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(r1, 0x208200) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) creat(0x0, 0x0) 19:08:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) 19:08:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x4e8, 0x0, 0x0, "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"}], 0x4e8}, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xbf, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 284.089962][ T9839] tmpfs: Bad value for 'mpol' [ 284.172268][ T9839] tmpfs: Bad value for 'mpol' [ 284.185189][ T27] audit: type=1804 audit(1580584106.767:33): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir885265858/syzkaller.FsNIKg/3/file0/bus" dev="ramfs" ino=36986 res=1 19:08:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000003c0)={@void, @val, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x3a) [ 284.215515][ T27] audit: type=1804 audit(1580584106.767:34): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir885265858/syzkaller.FsNIKg/3/file0/bus" dev="ramfs" ino=36986 res=1 [ 284.242072][ T27] audit: type=1804 audit(1580584106.767:35): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir885265858/syzkaller.FsNIKg/3/file0/bus" dev="ramfs" ino=36986 res=1 19:08:26 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'rmd320-generic\x00'}}) 19:08:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 19:08:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008550e, &(0x7f0000000100)) 19:08:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045505, &(0x7f0000000100)) 19:08:27 executing program 4: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe400000bc0002", 0x43) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x810403, 0x0) 19:08:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[{0x4e8, 0x0, 0x0, "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"}], 0x4e8}, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0xbf, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 284.865100][ T9878] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 19:08:27 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e00879e20372f5f7e031e0004c2ff00", @ANYRES32=r6], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) 19:08:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) 19:08:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x33, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, [{0xc000000}]}, 0x1a6) 19:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) 19:08:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x5516}) [ 285.540579][ T9899] EXT4-fs (sda1): re-mounted. Opts: (null) [ 285.582620][ T9899] EXT4-fs (sda1): re-mounted. Opts: (null) 19:08:28 executing program 4: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe400000bc0002", 0x43) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x810403, 0x0) 19:08:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) 19:08:28 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0x4020565b, &(0x7f0000000040)) 19:08:28 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e00879e20372f5f7e031e0004c2ff00", @ANYRES32=r6], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) 19:08:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045515, &(0x7f0000000100)) 19:08:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) 19:08:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x70, 0x2, 0x6, 0x401, 0x60, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0) [ 286.133187][ T9918] EXT4-fs (sda1): re-mounted. Opts: (null) 19:08:28 executing program 3: inotify_init() mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 19:08:28 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e00879e20372f5f7e031e0004c2ff00", @ANYRES32=r6], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) 19:08:28 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000001c00070cab0000000000f00007ab08000800000049860000210001c000000000000000000c00000000039815fa2c1ec28656aaa79bb94b46fe0000000a0002", 0xffffffffffffffa7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff2b) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 19:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x33, 0x7, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, [{}]}, 0x1a6) 19:08:29 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e00879e20372f5f7e031e0004c2ff00", @ANYRES32=r6], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) [ 286.469407][ T9938] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. 19:08:29 executing program 4: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe400000bc0002", 0x43) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x810403, 0x0) 19:08:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000480)='sessionid\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x300) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) tgkill(r1, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x6c, "0428a4df8a4dfda425af9a5bdd5e0cd63f8169c279409f8f0b4ba8181575c17d8bb1c8c5eb9f5a8b067adb87079a8b5e476f98e9c3bc6104719795716a360dd03f7ea36f5f6fcf1b963fbcf86f82bbd4b13b164f31a68f136da9159400b23b12905cc9e8e10690c5b5288ea8"}, &(0x7f0000000280)=0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) sendmsg$NL80211_CMD_NEW_KEY(r4, 0x0, 0x4008800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:08:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000400)) 19:08:29 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) 19:08:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) 19:08:29 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) [ 287.038634][ T9956] EXT4-fs (sda1): re-mounted. Opts: (null) [ 287.067386][ T9953] EXT4-fs (sda1): re-mounted. Opts: (null) [ 287.131309][ T9956] EXT4-fs (sda1): re-mounted. Opts: (null) [ 287.166435][ T9969] EXT4-fs (sda1): re-mounted. Opts: (null) 19:08:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000400)) 19:08:29 executing program 3: r0 = socket$unix(0x1, 0x80000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:08:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000480)='sessionid\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x300) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) tgkill(r1, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x6c, "0428a4df8a4dfda425af9a5bdd5e0cd63f8169c279409f8f0b4ba8181575c17d8bb1c8c5eb9f5a8b067adb87079a8b5e476f98e9c3bc6104719795716a360dd03f7ea36f5f6fcf1b963fbcf86f82bbd4b13b164f31a68f136da9159400b23b12905cc9e8e10690c5b5288ea8"}, &(0x7f0000000280)=0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) sendmsg$NL80211_CMD_NEW_KEY(r4, 0x0, 0x4008800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:08:29 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc126d3a09ffc2c65400"}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) [ 287.353780][ C0] ================================================================== [ 287.362206][ C0] BUG: KASAN: slab-out-of-bounds in bitmap_ipmac_gc+0x119/0x590 [ 287.369848][ C0] Read of size 8 at addr ffff8880968e41c0 by task udevd/9613 [ 287.377217][ C0] [ 287.379564][ C0] CPU: 0 PID: 9613 Comm: udevd Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 287.388579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.398641][ C0] Call Trace: [ 287.402022][ C0] [ 287.405014][ C0] dump_stack+0x197/0x210 [ 287.409355][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 287.414376][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 287.421404][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 287.426470][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 287.431440][ C0] __kasan_report.cold+0x1b/0x32 [ 287.436453][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 287.440405][ T9974] EXT4-fs (sda1): re-mounted. Opts: (null) [ 287.441401][ C0] kasan_report+0x12/0x20 [ 287.441475][ C0] check_memory_region+0x134/0x1a0 [ 287.441500][ C0] __kasan_check_read+0x11/0x20 [ 287.461576][ C0] bitmap_ipmac_gc+0x119/0x590 [ 287.466402][ C0] call_timer_fn+0x1ac/0x780 [ 287.471123][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 287.476418][ C0] ? msleep_interruptible+0x150/0x150 [ 287.481789][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 287.487162][ C0] ? trace_hardirqs_on+0x67/0x240 [ 287.492194][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 287.497499][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 287.502789][ C0] run_timer_softirq+0x6c3/0x1790 [ 287.507827][ C0] ? add_timer+0x930/0x930 [ 287.512308][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 287.518474][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 287.524023][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 287.530011][ C0] ? trace_hardirqs_on+0x67/0x240 [ 287.535125][ C0] __do_softirq+0x262/0x98c [ 287.539690][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 287.544594][ C0] irq_exit+0x19b/0x1e0 [ 287.548759][ C0] smp_apic_timer_interrupt+0x1a3/0x610 19:08:30 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)={[{@nojoliet='nojoliet'}, {@map_off='map=off'}]}) 19:08:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x4e}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 287.554314][ C0] apic_timer_interrupt+0xf/0x20 [ 287.559245][ C0] [ 287.562272][ C0] RIP: 0010:vfs_getattr_nosec+0xcd/0x290 [ 287.567913][ C0] Code: 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ae 01 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b 5d 28 <48> 8d 7b 50 48 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 81 01 00 00 48 [ 287.587620][ C0] RSP: 0018:ffffc90001ec7c80 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 287.596035][ C0] RAX: dffffc0000000000 RBX: ffff888096ab8000 RCX: 0000000000000000 [ 287.604015][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888091eaea28 [ 287.611996][ C0] RBP: ffffc90001ec7cb8 R08: fffff520003d8fce R09: ffffc90001ec7de8 [ 287.620069][ C0] R10: fffff520003d8fcd R11: ffffc90001ec7e6f R12: ffffc90001ec7de8 [ 287.628042][ C0] R13: ffff888091eaea00 R14: ffffc90001ec7d40 R15: 0000000000000900 [ 287.636235][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.642490][ C0] vfs_getattr+0x4b/0x70 [ 287.646747][ C0] vfs_statx+0x15d/0x200 [ 287.650998][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 287.656552][ C0] ? vfs_statx_fd+0xc0/0xc0 [ 287.661070][ C0] __do_sys_newlstat+0xa4/0x130 [ 287.665935][ C0] ? __do_sys_newstat+0x130/0x130 [ 287.670967][ C0] ? do_unlinkat+0x14b/0x6d0 [ 287.675648][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 287.681228][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 287.686696][ C0] ? do_syscall_64+0x26/0x790 [ 287.691385][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.697463][ C0] ? do_syscall_64+0x26/0x790 [ 287.702176][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 287.707492][ C0] __x64_sys_newlstat+0x54/0x80 [ 287.712355][ C0] do_syscall_64+0xfa/0x790 [ 287.716877][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.722775][ C0] RIP: 0033:0x7fd3718a8d05 [ 287.727198][ C0] Code: f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 01 51 2b 00 64 c7 00 16 [ 287.746920][ C0] RSP: 002b:00007ffd772065c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 287.755345][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3718a8d05 [ 287.763464][ C0] RDX: 00007ffd772065e0 RSI: 00007ffd772065e0 RDI: 00007ffd77206670 [ 287.771447][ C0] RBP: 0000000001983744 R08: 0000000001983744 R09: 00007fd3718fec20 [ 287.779427][ C0] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000001981e80 [ 287.787421][ C0] R13: 0000000001981f70 R14: 0000000001969250 R15: 000000000196ee10 [ 287.795537][ C0] [ 287.797884][ C0] Allocated by task 9929: 19:08:30 executing program 4: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800070800092500090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe400000bc0002", 0x43) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x810403, 0x0) 19:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000400)) [ 287.802244][ C0] save_stack+0x23/0x90 [ 287.806408][ C0] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 287.812051][ C0] kasan_kmalloc+0x9/0x10 [ 287.816475][ C0] __kmalloc+0x163/0x770 [ 287.820727][ C0] ip_set_alloc+0x38/0x5e [ 287.825058][ C0] bitmap_ipmac_create+0x4e8/0xa00 [ 287.830169][ C0] ip_set_create+0x6f1/0x1500 [ 287.834958][ C0] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 287.839894][ C0] netlink_rcv_skb+0x177/0x450 [ 287.844667][ C0] nfnetlink_rcv+0x1ba/0x460 [ 287.849261][ C0] netlink_unicast+0x59e/0x7e0 [ 287.854265][ C0] netlink_sendmsg+0x91c/0xea0 [ 287.859130][ C0] sock_sendmsg+0xd7/0x130 [ 287.863553][ C0] ____sys_sendmsg+0x753/0x880 [ 287.868332][ C0] ___sys_sendmsg+0x100/0x170 [ 287.873013][ C0] __sys_sendmsg+0x105/0x1d0 [ 287.877605][ C0] __x64_sys_sendmsg+0x78/0xb0 [ 287.882395][ C0] do_syscall_64+0xfa/0x790 [ 287.886935][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.892817][ C0] [ 287.895161][ C0] Freed by task 9650: [ 287.899169][ C0] save_stack+0x23/0x90 [ 287.903334][ C0] __kasan_slab_free+0x102/0x150 [ 287.908283][ C0] kasan_slab_free+0xe/0x10 [ 287.912792][ C0] kfree+0x10a/0x2c0 [ 287.916695][ C0] kobject_rename+0x192/0x290 [ 287.920301][ T9984] ISOFS: Unable to identify CD-ROM format. [ 287.921567][ C0] device_rename+0x14b/0x200 [ 287.921641][ C0] dev_change_name+0x395/0x930 [ 287.937077][ C0] do_setlink+0x2d28/0x3720 [ 287.941618][ C0] __rtnl_newlink+0xbef/0x1790 [ 287.946387][ C0] rtnl_newlink+0x69/0xa0 [ 287.950719][ C0] rtnetlink_rcv_msg+0x45e/0xaf0 19:08:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e9eb4123aca653150422bc91e9585fb38000000008f14a892453c", 0x5}, {&(0x7f0000000940)="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", 0x1f1}, {&(0x7f0000000140)="cd2770c24ad5262a10c5f45200000000", 0x10}, {&(0x7f00000008c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6, 0x0, 0x0, 0xffffffe0}}], 0xc5, 0x0) [ 287.955656][ C0] netlink_rcv_skb+0x177/0x450 [ 287.960537][ C0] rtnetlink_rcv+0x1d/0x30 [ 287.964955][ C0] netlink_unicast+0x59e/0x7e0 [ 287.969729][ C0] netlink_sendmsg+0x91c/0xea0 [ 287.974503][ C0] sock_sendmsg+0xd7/0x130 [ 287.978924][ C0] __sys_sendto+0x262/0x380 [ 287.983433][ C0] __x64_sys_sendto+0xe1/0x1a0 [ 287.988204][ C0] do_syscall_64+0xfa/0x790 [ 287.992717][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.998711][ C0] [ 288.001054][ C0] The buggy address belongs to the object at ffff8880968e41c0 [ 288.001054][ C0] which belongs to the cache kmalloc-32 of size 32 [ 288.014937][ C0] The buggy address is located 0 bytes inside of [ 288.014937][ C0] 32-byte region [ffff8880968e41c0, ffff8880968e41e0) [ 288.028050][ C0] The buggy address belongs to the page: [ 288.033680][ C0] page:ffffea00025a3900 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880968e4fc1 [ 288.044081][ C0] flags: 0xfffe0000000200(slab) [ 288.049043][ C0] raw: 00fffe0000000200 ffffea00028f54c8 ffffea0002a14588 ffff8880aa4001c0 [ 288.057617][ C0] raw: ffff8880968e4fc1 ffff8880968e4000 000000010000003f 0000000000000000 [ 288.066257][ C0] page dumped because: kasan: bad access detected [ 288.072661][ C0] [ 288.075012][ C0] Memory state around the buggy address: [ 288.080630][ C0] ffff8880968e4080: 00 03 fc fc fc fc fc fc 00 01 fc fc fc fc fc fc [ 288.088687][ C0] ffff8880968e4100: 00 03 fc fc fc fc fc fc 00 03 fc fc fc fc fc fc [ 288.096787][ C0] >ffff8880968e4180: 00 03 fc fc fc fc fc fc 04 fc fc fc fc fc fc fc [ 288.104879][ C0] ^ [ 288.111026][ C0] ffff8880968e4200: 00 03 fc fc fc fc fc fc 00 00 06 fc fc fc fc fc [ 288.119209][ C0] ffff8880968e4280: 05 fc fc fc fc fc fc fc 05 fc fc fc fc fc fc fc [ 288.127264][ C0] ================================================================== [ 288.135425][ C0] Disabling lock debugging due to kernel taint [ 288.141658][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 288.149161][ C0] CPU: 0 PID: 9613 Comm: udevd Tainted: G B 5.5.0-rc6-next-20200116-syzkaller #0 [ 288.159654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.169701][ C0] Call Trace: [ 288.172975][ C0] [ 288.175889][ C0] dump_stack+0x197/0x210 [ 288.180228][ C0] panic+0x2e3/0x75c [ 288.184184][ C0] ? add_taint.cold+0x16/0x16 [ 288.188937][ C0] ? retint_kernel+0x2b/0x2b [ 288.193521][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 288.198551][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 288.203549][ C0] end_report+0x47/0x4f [ 288.207702][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 288.212653][ C0] __kasan_report.cold+0xe/0x32 [ 288.217576][ C0] ? bitmap_ipmac_gc+0x119/0x590 [ 288.222514][ C0] kasan_report+0x12/0x20 [ 288.226836][ C0] check_memory_region+0x134/0x1a0 [ 288.232029][ C0] __kasan_check_read+0x11/0x20 [ 288.236967][ C0] bitmap_ipmac_gc+0x119/0x590 [ 288.241726][ C0] call_timer_fn+0x1ac/0x780 [ 288.246305][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 288.251660][ C0] ? msleep_interruptible+0x150/0x150 [ 288.257023][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 288.262614][ C0] ? trace_hardirqs_on+0x67/0x240 [ 288.267637][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 288.272916][ C0] ? bitmap_ipmac_list+0x1080/0x1080 [ 288.279108][ C0] run_timer_softirq+0x6c3/0x1790 [ 288.284124][ C0] ? add_timer+0x930/0x930 [ 288.288561][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 288.294735][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 288.300480][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 288.306452][ C0] ? trace_hardirqs_on+0x67/0x240 [ 288.312109][ C0] __do_softirq+0x262/0x98c [ 288.316607][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 288.321471][ C0] irq_exit+0x19b/0x1e0 [ 288.325723][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 288.331826][ C0] apic_timer_interrupt+0xf/0x20 [ 288.336747][ C0] [ 288.340726][ C0] RIP: 0010:vfs_getattr_nosec+0xcd/0x290 [ 288.346375][ C0] Code: 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ae 01 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b 5d 28 <48> 8d 7b 50 48 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 81 01 00 00 48 [ 288.366095][ C0] RSP: 0018:ffffc90001ec7c80 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 288.374501][ C0] RAX: dffffc0000000000 RBX: ffff888096ab8000 RCX: 0000000000000000 [ 288.382470][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888091eaea28 [ 288.390571][ C0] RBP: ffffc90001ec7cb8 R08: fffff520003d8fce R09: ffffc90001ec7de8 [ 288.398567][ C0] R10: fffff520003d8fcd R11: ffffc90001ec7e6f R12: ffffc90001ec7de8 [ 288.406911][ C0] R13: ffff888091eaea00 R14: ffffc90001ec7d40 R15: 0000000000000900 [ 288.414901][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.421176][ C0] vfs_getattr+0x4b/0x70 [ 288.425728][ C0] vfs_statx+0x15d/0x200 [ 288.429978][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 288.435521][ C0] ? vfs_statx_fd+0xc0/0xc0 [ 288.440028][ C0] __do_sys_newlstat+0xa4/0x130 [ 288.444897][ C0] ? __do_sys_newstat+0x130/0x130 [ 288.449910][ C0] ? do_unlinkat+0x14b/0x6d0 [ 288.454511][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 288.459959][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 288.465413][ C0] ? do_syscall_64+0x26/0x790 [ 288.470094][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.476217][ C0] ? do_syscall_64+0x26/0x790 [ 288.480900][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 288.486178][ C0] __x64_sys_newlstat+0x54/0x80 [ 288.491017][ C0] do_syscall_64+0xfa/0x790 [ 288.495521][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.501424][ C0] RIP: 0033:0x7fd3718a8d05 [ 288.505949][ C0] Code: f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 01 51 2b 00 64 c7 00 16 [ 288.526837][ C0] RSP: 002b:00007ffd772065c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 288.535379][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3718a8d05 [ 288.543472][ C0] RDX: 00007ffd772065e0 RSI: 00007ffd772065e0 RDI: 00007ffd77206670 [ 288.551573][ C0] RBP: 0000000001983744 R08: 0000000001983744 R09: 00007fd3718fec20 [ 288.559743][ C0] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000001981e80 [ 288.567849][ C0] R13: 0000000001981f70 R14: 0000000001969250 R15: 000000000196ee10 [ 288.577449][ C0] Kernel Offset: disabled [ 288.581820][ C0] Rebooting in 86400 seconds..