Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts. 2020/09/08 22:45:04 fuzzer started 2020/09/08 22:45:04 dialing manager at 10.128.0.105:34151 2020/09/08 22:45:04 syscalls: 3174 2020/09/08 22:45:04 code coverage: enabled 2020/09/08 22:45:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/09/08 22:45:04 extra coverage: extra coverage is not supported by the kernel 2020/09/08 22:45:04 setuid sandbox: enabled 2020/09/08 22:45:04 namespace sandbox: enabled 2020/09/08 22:45:04 Android sandbox: enabled 2020/09/08 22:45:04 fault injection: enabled 2020/09/08 22:45:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/08 22:45:04 net packet injection: enabled 2020/09/08 22:45:04 net device setup: enabled 2020/09/08 22:45:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/08 22:45:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/08 22:45:04 USB emulation: /dev/raw-gadget does not exist 2020/09/08 22:45:04 hci packet injection: enabled [ 34.858800] random: crng init done [ 34.862392] random: 7 urandom warning(s) missed due to ratelimiting 22:47:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x30, r3, 0x31, 0x0, 0x0, {{}, {}, {0x1, 0x14, 'syz0\x00'}}}, 0x30}}, 0x0) 22:47:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0307008300fffffcfe000100000004000180"], 0x18}}, 0x0) 22:47:04 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830af41b0000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 22:47:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x0, 0x200, 0x1f8, 0x0, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'bridge_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x1b8, 0x1f8, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv4=@empty, [], @ipv6=@private1, [], @ipv6=@private0, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 22:47:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) 22:47:04 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="900e000030003deb0000000000000000000000007c0e0100780e01000a0001007065646974000000640e0280200e02000000000000002576000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d29a24e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff96a3a8f386500200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034a4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400005001400060006000100000000000600020000000000140006000600010000000000060002"], 0xe90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 153.857732] audit: type=1400 audit(1599605224.455:8): avc: denied { execmem } for pid=6375 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 155.074129] IPVS: ftp: loaded support on port[0] = 21 [ 155.258651] IPVS: ftp: loaded support on port[0] = 21 [ 155.374000] chnl_net:caif_netlink_parms(): no params data found [ 155.410772] IPVS: ftp: loaded support on port[0] = 21 [ 155.501504] chnl_net:caif_netlink_parms(): no params data found [ 155.545824] IPVS: ftp: loaded support on port[0] = 21 [ 155.681974] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.688327] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.695916] device bridge_slave_0 entered promiscuous mode [ 155.713442] IPVS: ftp: loaded support on port[0] = 21 [ 155.732163] chnl_net:caif_netlink_parms(): no params data found [ 155.746125] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.753548] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.760766] device bridge_slave_1 entered promiscuous mode [ 155.771434] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.777837] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.784812] device bridge_slave_0 entered promiscuous mode [ 155.791498] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.798095] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.805523] device bridge_slave_1 entered promiscuous mode [ 155.849119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.885627] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.894723] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.936223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.008475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.015765] team0: Port device team_slave_0 added [ 156.030616] IPVS: ftp: loaded support on port[0] = 21 [ 156.056797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.063928] team0: Port device team_slave_0 added [ 156.069124] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.078371] team0: Port device team_slave_1 added [ 156.098372] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.105454] team0: Port device team_slave_1 added [ 156.132836] chnl_net:caif_netlink_parms(): no params data found [ 156.191624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.197991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.223608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.252405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.258639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.285508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.297536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.304459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.329952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.340366] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.346807] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.353811] device bridge_slave_0 entered promiscuous mode [ 156.391365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.398304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.424494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.435494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.443108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.450117] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.458691] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.466190] device bridge_slave_1 entered promiscuous mode [ 156.496592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.504013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.575742] chnl_net:caif_netlink_parms(): no params data found [ 156.586428] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.598659] device hsr_slave_0 entered promiscuous mode [ 156.605052] device hsr_slave_1 entered promiscuous mode [ 156.611146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.624870] device hsr_slave_0 entered promiscuous mode [ 156.630895] device hsr_slave_1 entered promiscuous mode [ 156.642093] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 156.649873] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.662447] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.677954] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 156.778997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.786514] team0: Port device team_slave_0 added [ 156.838368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.846186] team0: Port device team_slave_1 added [ 156.893077] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.899428] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.906847] device bridge_slave_0 entered promiscuous mode [ 156.932397] chnl_net:caif_netlink_parms(): no params data found [ 156.946137] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.952802] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.959640] device bridge_slave_1 entered promiscuous mode [ 157.022476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.028724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.054996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.082169] Bluetooth: hci0 command 0x0409 tx timeout [ 157.094086] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.102477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.108711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.135440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.162657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.174567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.204376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.241771] Bluetooth: hci5 command 0x0409 tx timeout [ 157.247050] Bluetooth: hci3 command 0x0409 tx timeout [ 157.254227] Bluetooth: hci4 command 0x0409 tx timeout [ 157.257131] Bluetooth: hci2 command 0x0409 tx timeout [ 157.259469] Bluetooth: hci1 command 0x0409 tx timeout [ 157.281105] device hsr_slave_0 entered promiscuous mode [ 157.289033] device hsr_slave_1 entered promiscuous mode [ 157.295336] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.302481] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.309319] device bridge_slave_0 entered promiscuous mode [ 157.316244] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.323896] team0: Port device team_slave_0 added [ 157.329845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.338547] team0: Port device team_slave_1 added [ 157.352482] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.359561] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.366972] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.374394] device bridge_slave_1 entered promiscuous mode [ 157.404773] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.422347] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.438797] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.445595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.453155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.478771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.511337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.520730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.532707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.538941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.564477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.590796] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.597220] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.604538] device bridge_slave_0 entered promiscuous mode [ 157.619550] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.626412] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.633902] device bridge_slave_1 entered promiscuous mode [ 157.647000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.664347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.673833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.699199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.728340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.735938] team0: Port device team_slave_0 added [ 157.770964] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.778741] team0: Port device team_slave_0 added [ 157.785059] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.792540] team0: Port device team_slave_1 added [ 157.807723] device hsr_slave_0 entered promiscuous mode [ 157.814349] device hsr_slave_1 entered promiscuous mode [ 157.820426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.833268] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.840407] team0: Port device team_slave_1 added [ 157.869558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.894503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.900726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.927498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.938736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.945723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.970996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.983256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.990027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.996320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.021538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.049464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.055873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.081484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.092468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.099961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.108219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.119923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.141259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.213622] device hsr_slave_0 entered promiscuous mode [ 158.219390] device hsr_slave_1 entered promiscuous mode [ 158.236744] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.247191] device hsr_slave_0 entered promiscuous mode [ 158.254663] device hsr_slave_1 entered promiscuous mode [ 158.260885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.267824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 158.275273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.287388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.294960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.314551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 158.335649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.346050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.369001] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.377697] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.384537] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.405352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.415094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.424965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.442792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.449963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.457123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.464870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.473270] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.479696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.486992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.495020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.502702] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.509033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.516143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.527296] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.534102] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.563406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.572153] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.584086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.593269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.601439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.609914] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.616310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.625651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.667019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.693117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.711731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.719496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.727938] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.734332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.741304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.751585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.792837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.807458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.817895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.833302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.850425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.857272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.866405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.876253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.884184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.891622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.901435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.915057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.926961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 158.944765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.955386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.963609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.971026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.979200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.986945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.996403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.016782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.023940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.031652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.040440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.048377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.057009] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.072761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.082142] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.088132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.099485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.107474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.125566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.143579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.151054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.163991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.171139] Bluetooth: hci0 command 0x041b tx timeout [ 159.188999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.196362] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.203305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.213617] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 159.221301] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.229584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.241211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.248715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.262193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.278033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.286618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.301164] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 159.310069] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.319812] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.322315] Bluetooth: hci2 command 0x041b tx timeout [ 159.328093] Bluetooth: hci1 command 0x041b tx timeout [ 159.337260] Bluetooth: hci4 command 0x041b tx timeout [ 159.341797] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.343524] Bluetooth: hci3 command 0x041b tx timeout [ 159.354412] Bluetooth: hci5 command 0x041b tx timeout [ 159.358941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.367206] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.373571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.380368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.387352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.394332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.401074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.408153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.416105] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.434083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.447268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.455538] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.461612] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.470973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.480288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.490529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.498431] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.504829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.512189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.519817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.527650] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.534034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.541251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.548557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.558141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.569822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.581487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.589956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.599909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.609459] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.615837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.623861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.631477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.639352] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.645755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.655069] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.668386] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.675181] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.683868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.691637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 159.702786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.709595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.720976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.728680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.736565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.744531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.754564] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.765167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.774539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.786973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.796169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.809488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.817935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.825946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.834549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.842708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.850193] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.856585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.863540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.870282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.879599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.890139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.899244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.907179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.914749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.923438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.930877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.939037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.947019] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.953412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.961090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.970232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.980496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.988941] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 159.995203] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.002734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.011202] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 160.019605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.027959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.036371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.044833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.053310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.060605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.068819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.076826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.087406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.096861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.106470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.114500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.122520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.132064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.142230] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 160.151256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.159830] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 160.171636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.181219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.189353] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.195748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.212032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.219586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.227563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.235440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.246123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.255951] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.264158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.276325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.285288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.293248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.300786] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.307162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.315808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.323942] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 160.333532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.341664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.353175] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.359178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.370601] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 160.378501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.387139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.395762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.403950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.411579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.420414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.428997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.438247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.448175] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.457301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.471147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.480538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.488477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.495269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.502305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.513090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.525246] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 160.532908] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 160.539372] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 160.551163] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 160.559528] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 160.566387] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 160.572609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.580104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.589210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.597320] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 160.607752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.626137] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 160.635185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.646032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.653888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.661088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.669751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.677009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.685330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.697050] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 160.703881] device veth0_vlan entered promiscuous mode [ 160.710373] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 160.716640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.723884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.731647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.739305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.747347] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 160.756850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.767769] device veth0_vlan entered promiscuous mode [ 160.776390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.785391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.792630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.799313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.806135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.814110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.821777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.831408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 160.845061] device veth1_vlan entered promiscuous mode [ 160.851512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.861003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.877824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.890668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 160.907784] device veth1_vlan entered promiscuous mode [ 160.915690] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 160.927715] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 160.937953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.946258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.954930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.967287] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 160.977725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 160.988195] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 160.996975] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.004713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.013953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.021273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.029313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.036941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.043685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.053179] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 161.066476] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 161.076305] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.083315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.096501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.105881] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 161.117865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.125947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.137994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.156178] device veth0_macvtap entered promiscuous mode [ 161.163867] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 161.178957] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 161.195303] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 161.213730] device veth1_macvtap entered promiscuous mode [ 161.219925] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 161.231927] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.242805] Bluetooth: hci0 command 0x040f tx timeout [ 161.248622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.256526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.268531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.275498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.285741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 161.294255] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 161.310963] device veth0_macvtap entered promiscuous mode [ 161.323265] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 161.329642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.339563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.352598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.363245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 161.407963] device veth1_macvtap entered promiscuous mode [ 161.417395] Bluetooth: hci5 command 0x040f tx timeout [ 161.423804] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 161.431871] Bluetooth: hci3 command 0x040f tx timeout [ 161.438171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 161.445418] Bluetooth: hci4 command 0x040f tx timeout [ 161.450666] Bluetooth: hci1 command 0x040f tx timeout [ 161.452340] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 161.456432] Bluetooth: hci2 command 0x040f tx timeout [ 161.468544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.478624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.489075] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 161.497058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.508987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.517415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.530133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 161.538958] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 161.546748] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 161.554007] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 161.565648] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 161.573431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.583630] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 161.598482] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 161.606085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.616483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.624620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.633109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.640528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.649467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.658372] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 161.666874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 161.677427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.688920] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 161.696175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.713756] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 161.721047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.733712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.741488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.753717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.761466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.769579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.781235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 161.795341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.806639] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 161.813788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.820355] device veth0_vlan entered promiscuous mode [ 161.836602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.844993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.867427] device veth1_vlan entered promiscuous mode [ 161.900836] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 161.910303] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 161.929697] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 161.946652] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 161.954253] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 161.961599] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 161.980931] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 161.995854] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 162.004599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.014088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.021501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.029281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.037610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.046047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.053216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.059990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.069308] device veth0_vlan entered promiscuous mode [ 162.085187] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 162.096089] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 162.104422] device veth0_vlan entered promiscuous mode [ 162.119014] device veth1_vlan entered promiscuous mode [ 162.128218] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 162.141189] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 162.157868] device veth1_vlan entered promiscuous mode [ 162.168834] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 162.177941] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 162.185030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.193514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.200515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.209015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.216917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.231911] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 162.242160] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 162.263638] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 162.271183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.284716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.292643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.301577] device veth0_macvtap entered promiscuous mode [ 162.308713] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 162.322401] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 162.336021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.347313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.357118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.367393] device veth1_macvtap entered promiscuous mode [ 162.375174] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 162.384320] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 162.392655] device veth0_macvtap entered promiscuous mode [ 162.399620] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 162.409594] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 162.417858] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 162.425138] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 162.439626] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 162.467918] device veth1_macvtap entered promiscuous mode [ 162.479347] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 162.489304] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 162.496998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.504598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.511670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.519051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.527302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.535315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.542757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.550084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.557118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.566895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 162.578805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 162.588715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.600350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 162.609899] device veth0_vlan entered promiscuous mode [ 162.625299] device veth0_macvtap entered promiscuous mode [ 162.631521] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 162.647714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.659143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.674002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.684541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.695030] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 162.702137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.711262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 22:47:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x1b, 0x0, &(0x7f0000000200)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 162.722901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.730546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.738379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.748495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 162.759598] device veth1_macvtap entered promiscuous mode 22:47:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x4c}}, 0x0) [ 162.779015] device veth1_vlan entered promiscuous mode [ 162.797423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.814074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.828462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 162.841084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.863400] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 162.870583] batman_adv: batadv0: Interface activated: batadv_slave_1 22:47:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xf0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 162.884011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.894289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.905628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.918591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.929181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 162.939734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.952358] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 162.959375] batman_adv: batadv0: Interface activated: batadv_slave_0 22:47:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000140)={r3}, &(0x7f0000000080)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000007c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x10) 22:47:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 163.002274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.010019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.035006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.053787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.064965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 163.081730] hrtimer: interrupt took 56629 ns [ 163.089446] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 163.101575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.112933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.123400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.134243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.144472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.155059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.167409] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 163.175649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.210312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 163.224405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.238272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:47:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1e, &(0x7f0000000140)="5cf249b9740c8684445afd26b76af2f3c921bf3c0f339e57f4f21016a5b6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 163.282130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.311257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.322374] Bluetooth: hci0 command 0x0419 tx timeout [ 163.332875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.342760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.352880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.363167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.372675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.383283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.393942] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 163.400862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.410764] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 163.422693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.435488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.443707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.451399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.463167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.472939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.483002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.492391] Bluetooth: hci2 command 0x0419 tx timeout [ 163.493035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.499504] Bluetooth: hci1 command 0x0419 tx timeout [ 163.507148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.517474] Bluetooth: hci4 command 0x0419 tx timeout [ 163.522235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.528408] Bluetooth: hci3 command 0x0419 tx timeout [ 163.536767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.546607] Bluetooth: hci5 command 0x0419 tx timeout [ 163.551537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.567616] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 163.574776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.583655] device veth0_macvtap entered promiscuous mode [ 163.591478] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 163.599153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.610204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.619030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.640937] device veth1_macvtap entered promiscuous mode [ 163.650071] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 163.668376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 163.700055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 163.715768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.727451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.738835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.748554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.760461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.770269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.780419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.789660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.799399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.808872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.818598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.828576] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 163.836011] batman_adv: batadv0: Interface activated: batadv_slave_0 22:47:14 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x2000007) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0xffffffff}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 163.845694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.856040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.869568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.880035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.899535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.909859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.920638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.930695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.939922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.949938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.960631] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 163.968002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.977094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.985143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.994786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.008884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.294926] audit: type=1804 audit(1599605234.895:9): pid=7854 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir382466109/syzkaller.bk3BLe/0/cgroup.controllers" dev="sda1" ino=15756 res=1 [ 164.334693] xt_conntrack: cannot load conntrack support for proto=10 22:47:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 22:47:15 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x1f}, 0x10) 22:47:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)={0x44, 0x1, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x44}}, 0x0) 22:47:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x1000}]}}}]}, 0x44}}, 0x0) 22:47:15 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xa500, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x2000007) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x3}, 0xd8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0xffffffff}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5, r1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:47:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 22:47:15 executing program 3: set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) 22:47:15 executing program 5: r0 = inotify_init() prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) dup(r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200488c4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r3, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "011d00", '\x00', '\x00', "00f45000000b00"}, 0x28) [ 165.393096] audit: type=1804 audit(1599605235.995:10): pid=7903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir548674041/syzkaller.1XD7Kc/1/file0/bus" dev="ramfs" ino=28720 res=1 22:47:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac163", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000025c0)={0x14}, 0x14}}, 0x0) [ 165.556587] audit: type=1804 audit(1599605236.055:11): pid=7921 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir548674041/syzkaller.1XD7Kc/1/file0/bus" dev="ramfs" ino=28720 res=1 22:47:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r0}, 0x10) [ 165.707413] audit: type=1804 audit(1599605236.065:12): pid=7903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir548674041/syzkaller.1XD7Kc/1/file0/bus" dev="ramfs" ino=28720 res=1 [ 165.824567] audit: type=1804 audit(1599605236.235:13): pid=7903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir548674041/syzkaller.1XD7Kc/1/file0/file0/bus" dev="ramfs" ino=28742 res=1 22:47:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x82, 0x0, 0xffffffff, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 22:47:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 22:47:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x78) r0 = socket(0x28, 0x4000000000080002, 0x0) ioctl$FIONCLEX(r0, 0x5450) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@dev, @initdev, @initdev}, &(0x7f0000000100)=0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{r2}, 0x4b, 0x0, 0x2}) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0x7ffff000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 22:47:16 executing program 2: fanotify_mark(0xffffffffffffffff, 0x181, 0x0, 0xffffffffffffffff, 0x0) 22:47:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) dup2(r3, r0) 22:47:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, &(0x7f0000012ffc)=0x4f) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 22:47:16 executing program 3: getpgrp(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236, 0x1ba}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 22:47:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) [ 166.415636] audit: type=1800 audit(1599605237.015:14): pid=8225 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15781 res=0 22:47:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r2, 0x0, 0x0) 22:47:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0xfffffffffffffffd) 22:47:17 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000f80)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070100004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f8492b80482f48821a0d2d17f2f1754558f229c9731b91c95b478af6d71d79a5ed8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3ffff369289aa6812b8e007e733a9a459788b9c37931bdba010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ce2ac16f64ead70ef3b3a6aa57f1ac2e99e0e67a993716dbf5de46ca1fbd732f8cf480469f0f53acbb40b401c3738270b31dd362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000400000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd1d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f9d2001e038451bb96589a7eab04871bc47207cd313f00000000000000407d000000000000a0ee4a082ec29816fb000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a61434b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495083186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f13d9536247ba66eb701a30744debfe69126c3f54250d7b3639e13f8df6ff262b2ce045b032abe1e891c50201e114e8c2ac0c274597e183953d823bc92acff3fbeb58c4ea7a9eb3c19ed601fe598919857bbdf0ce8de1a9cd0645ec"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:47:17 executing program 4: r0 = userfaultfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) [ 166.794976] audit: type=1400 audit(1599605237.385:15): avc: denied { sys_admin } for pid=8256 comm="syz-executor.1" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 22:47:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xd4, 0x0, 0x0) 22:47:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept$inet6(r1, 0x0, 0x0) [ 166.968880] audit: type=1800 audit(1599605237.565:16): pid=8269 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15764 res=0 [ 166.987487] syz-executor.0 (8225) used greatest stack depth: 24824 bytes left 22:47:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x403}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00', 0x6cf7832e}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x397}) 22:47:17 executing program 3: getpgrp(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236, 0x1ba}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 22:47:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x8000, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 22:47:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="97ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:47:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 22:47:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, &(0x7f0000000000)=0x1f, 0x6000000080dc) [ 167.219345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:47:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0xe6397c2680) 22:47:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001000000080001"], 0x44}}, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 167.374003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 167.488032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:47:18 executing program 1: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000f80)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070100004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f8492b80482f48821a0d2d17f2f1754558f229c9731b91c95b478af6d71d79a5ed8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3ffff369289aa6812b8e007e733a9a459788b9c37931bdba010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ce2ac16f64ead70ef3b3a6aa57f1ac2e99e0e67a993716dbf5de46ca1fbd732f8cf480469f0f53acbb40b401c3738270b31dd362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000400000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd1d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f9d2001e038451bb96589a7eab04871bc47207cd313f00000000000000407d000000000000a0ee4a082ec29816fb000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a61434b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495083186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f13d9536247ba66eb701a30744debfe69126c3f54250d7b3639e13f8df6ff262b2ce045b032abe1e891c50201e114e8c2ac0c274597e183953d823bc92acff3fbeb58c4ea7a9eb3c19ed601fe598919857bbdf0ce8de1a9cd0645ec"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 22:47:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:47:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x121, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a0605845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:47:18 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045005, &(0x7f00000000c0)=0x40) 22:47:18 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0) 22:47:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) 22:47:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f0000000100)=""/142, 0x4e, 0x8e, 0x8}, 0x20) 22:47:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x7, 0x5, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 22:47:18 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x5015, 0x0) 22:47:18 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x480eaae4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x15) 22:47:18 executing program 5: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x0, r0}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x100000, 0xffffffffffffffff, 0x1}) 22:47:18 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$inet(0xa, 0x801, 0x84) sendto(r2, &(0x7f0000000080)="f5", 0x1, 0x0, &(0x7f0000000100)=@generic={0xa, "6a64c974246412fdb7e4937f9442856bb59c929ee4a4d8ed023d4fb8c157aefef87528417a5dbb266c1215687e3a3e7cac9293f2c6dffd1fb0bc81692c0a16348217ea1350bab263aea5aec5295a7daf06e02021d0ce17fa039ec38c86840a6dabc8024e80511492c3c476ff0173c6ec799414bcb3331ed847386283e44a"}, 0x80) listen(r2, 0xfc0004) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x104}], 0x1) 22:47:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x6, 0x201}, 0x14}}, 0x0) 22:47:19 executing program 1: rt_sigprocmask(0x0, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./file2\x00', 0x0) syz_mount_image$afs(0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f00000001c0)="be", 0x1}]) 22:47:19 executing program 4: set_mempolicy(0x1, &(0x7f0000000080)=0x2, 0x3f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) 22:47:19 executing program 2: write$nbd(0xffffffffffffffff, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000080)={'vlan1\x00', @ifru_mtu}) 22:47:19 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000000c0)=0x3f365342, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0xea8}) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 22:47:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x74) 22:47:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x178, 0x200, 0x200, 0x178, 0x5, 0x240, 0x308, 0x308, 0x240, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x77af, 0x0, 0x0, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 22:47:19 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYRESDEC], 0x7, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 168.463157] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 22:47:19 executing program 0: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000001c0)="00ba", &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000001c0), 0x0}, 0x20) 22:47:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b60, 0x0) 22:47:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) 22:47:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 22:47:19 executing program 5: r0 = socket(0x2, 0x6, 0x0) connect$netlink(r0, &(0x7f0000000000), 0xc) 22:47:19 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@t={0x81, 0x8, 0x0, 0x0, @generic}) 22:47:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x400}]}}}]}, 0x3c}}, 0x0) 22:47:19 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x45]}}]}) 22:47:19 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') creat(&(0x7f00000007c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200)=@v2, 0x9, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 22:47:19 executing program 3: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 22:47:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006d, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) 22:47:19 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x3, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{}, {}]}, @NHA_GROUP_TYPE={0x6}]}, 0x34}}, 0x0) [ 168.650303] audit: type=1400 audit(1599605239.245:17): avc: denied { create } for pid=8440 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 22:47:19 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:47:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0xc}, 0x10) [ 168.733245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=104 sclass=netlink_route_socket pid=8462 comm=syz-executor.5 [ 168.767055] overlayfs: './file0' not a directory 22:47:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x6}]}]}}, 0x0, 0x32}, 0x20) 22:47:19 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @mpls={[], @ipv4=@icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, @timestamp}}}, 0x46) [ 168.769578] audit: type=1804 audit(1599605239.345:18): pid=8452 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir146088924/syzkaller.iDeBaa/13/bus/file0" dev="sda1" ino=15791 res=1 22:47:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00", @ANYBLOB="233b0c8a432f7fd1f758ddfbaf672092979189"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 22:47:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000040)=""/59, 0x3b) 22:47:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCGETA(r0, 0x541a, 0x0) 22:47:19 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r1, 0x0, 0x11f08) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x8, 0x0, 0x0, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x46}}]}, 0x20}}, 0x8000) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x10000, 0x0) 22:47:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x16880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x80) openat$uinput(0xffffffffffffff9c, &(0x7f0000000900)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48000) 22:47:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0) 22:47:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) [ 168.912019] IPVS: ftp: loaded support on port[0] = 21 22:47:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x178, 0x0, 0x200, 0x178, 0x0, 0x260, 0x2e8, 0x2e8, 0x260, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 22:47:19 executing program 0: socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 22:47:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 169.108612] device bridge0 entered promiscuous mode 22:47:19 executing program 3: creat(0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x82) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x1}}, 0x18) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) [ 169.134290] device macsec1 entered promiscuous mode [ 169.173371] device bridge0 left promiscuous mode [ 169.259283] kvm [8528]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 169.268172] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000048 [ 169.299684] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000045 [ 169.316093] device ip6gretap0 entered promiscuous mode [ 169.321415] device macsec1 entered promiscuous mode [ 169.332842] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000048 [ 169.348533] device ip6gretap0 left promiscuous mode [ 169.355896] kvm [8528]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000023 data 0x3b9aca01 [ 169.370749] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040 [ 169.446629] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000004e [ 169.456649] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000a [ 169.467869] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000016 [ 169.478438] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002e [ 169.491379] kvm [8528]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000012 22:47:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x44}}, 0x0) 22:47:20 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "118203c3"}}) 22:47:20 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 22:47:20 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 169.874662] kauditd_printk_skb: 2 callbacks suppressed [ 169.874671] audit: type=1804 audit(1599605240.475:21): pid=8526 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir382466109/syzkaller.bk3BLe/14/file0" dev="sda1" ino=15800 res=1 22:47:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 22:47:20 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}}], 0x400000000000085, 0x0) 22:47:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10}]}, 0x30}, 0x1, 0x6c}, 0x0) 22:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800050, 0x2) 22:47:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x40000}}}}]}, 0x78}}, 0x0) 22:47:20 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/bus\x00', 0x0) [ 170.028389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:47:20 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000200000000001000"}) r2 = syz_open_pts(r1, 0x4000000040042) fcntl$dupfd(r1, 0x0, r2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x5) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) write$char_usb(r3, &(0x7f0000000300)="c9", 0x1) tkill(r0, 0x16) 22:47:20 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x65, 0x0, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 22:47:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffabdeff844105001a000000000000d74619edc70000000000009a00000300000000000000010100000000000227"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 22:47:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) set_mempolicy(0x1, &(0x7f0000000300)=0x75f, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) 22:47:20 executing program 4: ioperm(0x0, 0x8, 0x5) shutdown(0xffffffffffffffff, 0x0) 22:47:21 executing program 0: r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000380)=[{0x1, 0xffff}, {0x7}, {0x1, 0x4}, {0x3, 0x2}], 0x180) semop(r0, &(0x7f0000000380)=[{0x1, 0x2e5}], 0x1) 22:47:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="00bf7e325c489a0000941a"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 22:47:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000080)={@private2}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:47:21 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000005040)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000000100)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000018c0), 0x24, 0x0) 22:47:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f00000000c0)) 22:47:21 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "010300000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8501a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a00"}, 0x80) bind(r0, &(0x7f0000670000)=@generic={0x1e, "02fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) 22:47:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x16, 0xd785ab268586148d, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str=']nodev{\x00'}]}]}, 0x24}}, 0x0) 22:47:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x18, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 22:47:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 22:47:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x174, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8104}, [@IFLA_LINKINFO={0x144, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x134, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x10}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8007}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa99, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcb0, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xae5f}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200f3af9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x58, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x38}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x174}}, 0x48000) 22:47:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x2, &(0x7f0000000040)="03999d58364ac24f8ada449a1ab3746e0c7cc7276c00d26551573c1b53dd8ebfa844368d", 0x24) 22:47:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) tkill(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 22:47:21 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r0) 22:47:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:47:23 executing program 3: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001f80)={r2, r0, r1}, &(0x7f0000000100)=""/87, 0x57, &(0x7f0000000180)={&(0x7f00000000c0)={'rmd128-generic\x00'}}) 22:47:23 executing program 2: unshare(0x20600) shutdown(0xffffffffffffffff, 0x0) 22:47:23 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 22:47:23 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r1, r1, &(0x7f0000000240)=0x8, 0x7fff) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 22:47:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind(r0, 0x0, 0x0) 22:47:23 executing program 5: unshare(0x24020400) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = dup(r0) ioctl$USBDEVFS_BULK(r1, 0x80045505, 0x0) 22:47:23 executing program 0: prlimit64(0x0, 0xb, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000880)=0x6, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:47:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfb], 0x0, 0x310}) ioctl$KVM_RUN(r4, 0xae80, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:23 executing program 2: unshare(0x400) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 22:47:23 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffff7b, 0x0, 0xa0, &(0x7f0000000140)=""/148, 0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x16, &(0x7f00000003c0)="c4c691019919da0700000000cd893169b618322ff660"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = getpid() tkill(r4, 0x2f) 22:47:23 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/45, 0x2d}}], 0x1, 0x0, 0x0) 22:47:24 executing program 2: r0 = socket(0x2, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x2, 0xd899) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) shutdown(r2, 0x1) 22:47:24 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) [ 173.411472] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 22:47:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val, @val, @ipv4=@dccp={{0x15, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xe, "ee319c96d263d85915f4f81f"}, @rr={0x7, 0xb, 0x0, [@multicast2, @loopback]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3d0635", 0x0, "b0a657"}}}}, 0x72) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 22:47:24 executing program 1: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r0}) [ 173.597242] audit: type=1800 audit(1599605244.195:22): pid=8780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=15772 res=0 [ 173.651644] audit: type=1804 audit(1599605244.235:23): pid=8800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir815526614/syzkaller.FPfyDc/20/bus" dev="sda1" ino=15772 res=1 22:47:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5602, &(0x7f0000000280)) 22:47:24 executing program 2: set_mempolicy(0x1, &(0x7f0000000080)=0x2, 0x3f) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000004c0)=@null={0x40, 0x40, 0x40, 0x8}) 22:47:24 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 22:47:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x2, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x10) 22:47:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x608901, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 22:47:24 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) 22:47:24 executing program 2: r0 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x0, 0x0) poll(&(0x7f0000001480)=[{r0}], 0x1, 0x0) 22:47:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c02e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:47:24 executing program 5: unshare(0x20400) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x5441, 0x0) 22:47:24 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) socket$nl_generic(0x10, 0x3, 0x10) 22:47:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) listen(r0, 0x0) [ 174.220258] kvm [8839]: vcpu0, guest rIP: 0xca ignored wrmsr: 0x11e data 0x0 [ 174.238378] audit: type=1800 audit(1599605244.825:24): pid=8843 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=15850 res=0 22:47:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 22:47:24 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 174.264286] kvm [8839]: vcpu0, guest rIP: 0xca disabled perfctr wrmsr: 0xc2 data 0x1a2 22:47:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 174.306862] syz-executor.5 (8861) used greatest stack depth: 24120 bytes left 22:47:24 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 22:47:24 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000000800", @ANYRES32=r3, @ANYBLOB="00000000000000f3280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff39974a61003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000002c00270e00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000300000009000100666c6f77000000002400020020000b"], 0x54}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:47:25 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$vivid(&(0x7f00000003c0)='/dev/video#\x00', 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 174.354160] audit: type=1804 audit(1599605244.925:25): pid=8865 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir815526614/syzkaller.FPfyDc/21/bus" dev="sda1" ino=15850 res=1 22:47:25 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xe, 0x1, 0x0, "913294185aff02ee09346f55d50b182ffca7e6fd12672a82ceb78c9833c93210"}) 22:47:25 executing program 2: unshare(0x40000000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 174.439367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:47:25 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffa) 22:47:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x200, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'virt_wifi0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 22:47:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r2, 0x2, &(0x7f0000001740)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000340)="d39b9de7bfa2", 0x6}]) [ 174.536636] IPVS: ftp: loaded support on port[0] = 21 [ 174.549117] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 22:47:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000d4001a8054000a80050008"], 0xfc}}, 0x0) [ 174.586720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.643496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:47:25 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000280)="55a5788c78738fb26cce04050000535dc21faf1600000200000078577f63c963728fbaee42d131120d420f000000000000ffffffff000000", 0x38}]) 22:47:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) unshare(0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mlockall(0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 174.723815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.735929] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.753013] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:47:25 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) [ 174.766827] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 22:47:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000001400)=ANY=[], 0xda00) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'cpu'}]}, 0x5) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 22:47:25 executing program 3: epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x41) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xd000000, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080), 0x4) [ 174.804117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.831510] IPVS: ftp: loaded support on port[0] = 21 [ 174.926464] ================================================================== [ 174.933929] BUG: KASAN: use-after-free in disk_unblock_events+0x4b/0x50 [ 174.940665] Read of size 8 at addr ffff8880a542c808 by task syz-executor.0/6380 [ 174.948096] [ 174.951386] CPU: 0 PID: 6380 Comm: syz-executor.0 Not tainted 4.14.196-syzkaller #0 [ 174.959167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.968520] Call Trace: [ 174.971103] dump_stack+0x1b2/0x283 [ 174.974731] print_address_description.cold+0x54/0x1d3 [ 174.980008] kasan_report_error.cold+0x8a/0x194 [ 174.984671] ? disk_unblock_events+0x4b/0x50 [ 174.989075] __asan_report_load8_noabort+0x68/0x70 [ 174.994004] ? loop_unregister_transfer+0x40/0x90 [ 174.998844] ? disk_unblock_events+0x4b/0x50 [ 175.003247] ? loop_unregister_transfer+0x90/0x90 [ 175.008083] disk_unblock_events+0x4b/0x50 [ 175.012312] __blkdev_get+0x83b/0x1090 [ 175.016200] ? sb_min_blocksize+0x1d0/0x1d0 [ 175.020511] blkdev_get+0x88/0x890 [ 175.024037] ? __blkdev_get+0x1090/0x1090 [ 175.028165] ? lock_downgrade+0x740/0x740 [ 175.032298] ? selinux_inode_getsecctx+0x80/0x80 [ 175.037035] ? do_raw_spin_unlock+0x164/0x220 [ 175.041514] ? _raw_spin_unlock+0x29/0x40 [ 175.045645] blkdev_open+0x1cc/0x250 [ 175.049360] ? security_file_open+0x82/0x190 [ 175.053756] do_dentry_open+0x44b/0xec0 [ 175.057711] ? blkdev_get_by_dev+0x70/0x70 [ 175.061934] vfs_open+0x105/0x220 [ 175.065371] path_openat+0x628/0x2970 [ 175.069157] ? path_lookupat+0x780/0x780 [ 175.073205] ? trace_hardirqs_on+0x10/0x10 [ 175.077430] do_filp_open+0x179/0x3c0 [ 175.081216] ? may_open_dev+0xe0/0xe0 [ 175.085023] ? lock_downgrade+0x740/0x740 [ 175.089172] ? do_raw_spin_unlock+0x164/0x220 [ 175.093651] ? _raw_spin_unlock+0x29/0x40 [ 175.097795] ? __alloc_fd+0x1be/0x490 [ 175.101580] ? dput.part.0+0x27/0x710 [ 175.105367] do_sys_open+0x296/0x410 [ 175.109076] ? filp_open+0x60/0x60 [ 175.112601] ? do_syscall_64+0x4c/0x640 [ 175.116553] ? do_sys_open+0x410/0x410 [ 175.120435] do_syscall_64+0x1d5/0x640 [ 175.124310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 175.129481] RIP: 0033:0x417101 [ 175.132653] RSP: 002b:00007ffe2d26f4e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 175.140342] RAX: ffffffffffffffda RBX: 000000000002aae4 RCX: 0000000000417101 [ 175.147601] RDX: 00007ffe2d26f57a RSI: 0000000000000002 RDI: 00007ffe2d26f570 [ 175.154853] RBP: 0000000000000058 R08: 0000000000000000 R09: 000000000000000a [ 175.162103] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000000 [ 175.169354] R13: 00007ffe2d26f520 R14: 000000000002aa5e R15: 00007ffe2d26f530 [ 175.176615] [ 175.178222] Allocated by task 7960: [ 175.181854] kasan_kmalloc+0xeb/0x160 [ 175.185639] kmem_cache_alloc_node_trace+0x153/0x400 [ 175.190723] alloc_disk_node+0x5d/0x3d0 [ 175.194681] loop_add+0x3cb/0x830 [ 175.198119] loop_control_ioctl+0x11a/0x3f0 [ 175.202422] do_vfs_ioctl+0x75a/0xff0 [ 175.206203] SyS_ioctl+0x7f/0xb0 [ 175.209551] do_syscall_64+0x1d5/0x640 [ 175.213418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 175.218582] [ 175.220189] Freed by task 6380: [ 175.223449] kasan_slab_free+0xc3/0x1a0 [ 175.227402] kfree+0xc9/0x250 [ 175.230490] device_release+0xf0/0x1a0 [ 175.234358] kobject_put+0x1f3/0x2d0 [ 175.238051] put_disk+0x1f/0x30 [ 175.241323] __blkdev_get+0x7a6/0x1090 [ 175.245195] blkdev_get+0x88/0x890 [ 175.248749] blkdev_open+0x1cc/0x250 [ 175.252444] do_dentry_open+0x44b/0xec0 [ 175.256396] vfs_open+0x105/0x220 [ 175.259827] path_openat+0x628/0x2970 [ 175.263609] do_filp_open+0x179/0x3c0 [ 175.267403] do_sys_open+0x296/0x410 [ 175.271111] do_syscall_64+0x1d5/0x640 [ 175.274994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 175.280165] [ 175.281778] The buggy address belongs to the object at ffff8880a542c280 [ 175.281778] which belongs to the cache kmalloc-2048 of size 2048 [ 175.294591] The buggy address is located 1416 bytes inside of [ 175.294591] 2048-byte region [ffff8880a542c280, ffff8880a542ca80) [ 175.306617] The buggy address belongs to the page: [ 175.311526] page:ffffea0002950b00 count:1 mapcount:0 mapping:ffff8880a542c280 index:0xffff8880a542d380 compound_mapcount: 0 [ 175.322802] flags: 0xfffe0000008100(slab|head) [ 175.327365] raw: 00fffe0000008100 ffff8880a542c280 ffff8880a542d380 0000000100000002 [ 175.335226] raw: ffffea0002463e20 ffffea00014b00a0 ffff88812fe52c40 0000000000000000 [ 175.343096] page dumped because: kasan: bad access detected [ 175.348783] [ 175.350392] Memory state around the buggy address: [ 175.355314] ffff8880a542c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.362651] ffff8880a542c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.369991] >ffff8880a542c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.377327] ^ [ 175.380931] ffff8880a542c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.388270] ffff8880a542c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.395605] ================================================================== [ 175.402941] Disabling lock debugging due to kernel taint 22:47:26 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 22:47:26 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=rdma,', {'port'}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x65], 0x2d, [0x0, 0x30, 0x0, 0x35], 0x2d, [], 0x2d, [0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x61]}}}, {@fsname={'fsname', 0x3d, 'upperdir'}}, {@obj_role={'obj_role'}}]}}) 22:47:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) unshare(0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mlockall(0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:47:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 175.493048] ptrace attach of "/root/syz-executor.4"[8991] was attempted by "/root/syz-executor.4"[8993] 22:47:26 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x20}, 0x10) 22:47:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) unshare(0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mlockall(0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:47:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000001400)=ANY=[], 0xda00) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'cpu'}]}, 0x5) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) [ 175.650651] Kernel panic - not syncing: panic_on_warn set ... [ 175.650651] [ 175.658044] CPU: 0 PID: 6380 Comm: syz-executor.0 Tainted: G B 4.14.196-syzkaller #0 [ 175.667039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.676378] Call Trace: [ 175.678957] dump_stack+0x1b2/0x283 [ 175.682576] panic+0x1f9/0x42d [ 175.685759] ? add_taint.cold+0x16/0x16 [ 175.689736] ? ___preempt_schedule+0x16/0x18 [ 175.694142] kasan_end_report+0x43/0x49 [ 175.698111] kasan_report_error.cold+0xa7/0x194 [ 175.702770] ? disk_unblock_events+0x4b/0x50 [ 175.707169] __asan_report_load8_noabort+0x68/0x70 [ 175.712092] ? loop_unregister_transfer+0x40/0x90 [ 175.716930] ? disk_unblock_events+0x4b/0x50 [ 175.721319] ? loop_unregister_transfer+0x90/0x90 [ 175.726139] disk_unblock_events+0x4b/0x50 [ 175.730355] __blkdev_get+0x83b/0x1090 [ 175.734225] ? sb_min_blocksize+0x1d0/0x1d0 [ 175.738545] blkdev_get+0x88/0x890 [ 175.742066] ? __blkdev_get+0x1090/0x1090 [ 175.746192] ? lock_downgrade+0x740/0x740 [ 175.750322] ? selinux_inode_getsecctx+0x80/0x80 [ 175.755056] ? do_raw_spin_unlock+0x164/0x220 [ 175.759532] ? _raw_spin_unlock+0x29/0x40 [ 175.763658] blkdev_open+0x1cc/0x250 [ 175.767351] ? security_file_open+0x82/0x190 [ 175.771740] do_dentry_open+0x44b/0xec0 [ 175.775696] ? blkdev_get_by_dev+0x70/0x70 [ 175.779918] vfs_open+0x105/0x220 [ 175.783355] path_openat+0x628/0x2970 [ 175.787138] ? path_lookupat+0x780/0x780 [ 175.791179] ? trace_hardirqs_on+0x10/0x10 [ 175.795397] do_filp_open+0x179/0x3c0 [ 175.799177] ? may_open_dev+0xe0/0xe0 [ 175.802961] ? lock_downgrade+0x740/0x740 [ 175.807088] ? do_raw_spin_unlock+0x164/0x220 [ 175.811561] ? _raw_spin_unlock+0x29/0x40 [ 175.815689] ? __alloc_fd+0x1be/0x490 [ 175.819472] ? dput.part.0+0x27/0x710 [ 175.823252] do_sys_open+0x296/0x410 [ 175.826945] ? filp_open+0x60/0x60 [ 175.830467] ? do_syscall_64+0x4c/0x640 [ 175.834421] ? do_sys_open+0x410/0x410 [ 175.838291] do_syscall_64+0x1d5/0x640 [ 175.842163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 175.847331] RIP: 0033:0x417101 [ 175.850499] RSP: 002b:00007ffe2d26f4e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 175.858190] RAX: ffffffffffffffda RBX: 000000000002aae4 RCX: 0000000000417101 [ 175.865455] RDX: 00007ffe2d26f57a RSI: 0000000000000002 RDI: 00007ffe2d26f570 [ 175.872705] RBP: 0000000000000058 R08: 0000000000000000 R09: 000000000000000a [ 175.879958] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000000 [ 175.887209] R13: 00007ffe2d26f520 R14: 000000000002aa5e R15: 00007ffe2d26f530 [ 175.895387] Kernel Offset: disabled [ 175.899030] Rebooting in 86400 seconds..