[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 45.138323][ T8865] bash (8865) used greatest stack depth: 10440 bytes left Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. 2020/05/15 23:34:19 fuzzer started 2020/05/15 23:34:19 dialing manager at 10.128.0.105:37863 2020/05/15 23:34:19 syscalls: 3055 2020/05/15 23:34:19 code coverage: enabled 2020/05/15 23:34:19 comparison tracing: enabled 2020/05/15 23:34:19 extra coverage: enabled 2020/05/15 23:34:19 setuid sandbox: enabled 2020/05/15 23:34:19 namespace sandbox: enabled 2020/05/15 23:34:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/15 23:34:19 fault injection: enabled 2020/05/15 23:34:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/15 23:34:19 net packet injection: enabled 2020/05/15 23:34:19 net device setup: enabled 2020/05/15 23:34:19 concurrency sanitizer: enabled 2020/05/15 23:34:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/15 23:34:19 USB emulation: enabled [ 53.342469][ T8904] KCSAN: could not find function: 'poll_schedule_timeout' [ 53.954817][ T8904] KCSAN: could not find function: 'calc_wb_limits' [ 56.797999][ T8904] KCSAN: could not find function: '_find_next_bit' 2020/05/15 23:34:26 adding functions to KCSAN blacklist: 'ktime_get_seconds' '__mark_inode_dirty' 'ep_poll' 'tick_nohz_next_event' 'blk_mq_dispatch_rq_list' 'mod_timer' 'poll_schedule_timeout' 'calc_wb_limits' 'xas_clear_mark' 'kauditd_thread' 'ext4_mark_iloc_dirty' '__filemap_fdatawrite_range' 'wbt_issue' 'copy_process' 'find_get_pages_range_tag' 'generic_write_end' 'tick_nohz_idle_stop_tick' 'futex_wait_queue_me' 'do_exit' 'vm_area_dup' 'generic_file_read_iter' 'wbt_done' '__ext4_new_inode' 'page_counter_charge' 'pipe_double_lock' 'do_wait' 'add_timer' '__lru_cache_add' 'pcpu_alloc' 'ext4_free_inodes_count' '__snd_rawmidi_transmit_ack' 'echo_char' 'watchdog' '_find_next_bit' '__mpage_writepage' 'tick_sched_do_timer' 'ktime_get_real_seconds' 'ext4_writepages' 'do_syslog' '__perf_event_overflow' 'audit_log_start' 'do_nanosleep' 'shmem_file_read_iter' 'blk_mq_get_request' 'exit_signals' '__add_to_page_cache_locked' 'dd_has_work' 'blk_mq_sched_dispatch_requests' 'do_signal_stop' 'generic_fillattr' 'run_timer_softirq' 23:37:56 executing program 0: [ 268.813338][ T8906] IPVS: ftp: loaded support on port[0] = 21 [ 268.897920][ T8906] chnl_net:caif_netlink_parms(): no params data found 23:37:56 executing program 1: [ 268.949034][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.956336][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.964188][ T8906] device bridge_slave_0 entered promiscuous mode [ 268.972335][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.979574][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.987233][ T8906] device bridge_slave_1 entered promiscuous mode [ 269.005395][ T8906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.016359][ T8906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.036686][ T8906] team0: Port device team_slave_0 added [ 269.044757][ T8906] team0: Port device team_slave_1 added [ 269.061227][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.068366][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.094795][ T8906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.106863][ T8906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.113996][ T8906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.140521][ T8906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.179294][ T9060] IPVS: ftp: loaded support on port[0] = 21 [ 269.203152][ T8906] device hsr_slave_0 entered promiscuous mode 23:37:56 executing program 2: [ 269.261132][ T8906] device hsr_slave_1 entered promiscuous mode 23:37:56 executing program 3: [ 269.409816][ T9072] IPVS: ftp: loaded support on port[0] = 21 [ 269.577529][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 269.631952][ T8906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.679694][ T8906] netdevsim netdevsim0 netdevsim1: renamed from eth1 23:37:57 executing program 4: [ 269.747874][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 269.749648][ T9244] IPVS: ftp: loaded support on port[0] = 21 [ 269.763937][ T8906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.842789][ T8906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.922159][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.930356][ T8906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.937819][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.944879][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.987484][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.995641][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state 23:37:57 executing program 5: [ 270.048003][ T9356] IPVS: ftp: loaded support on port[0] = 21 [ 270.061752][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.068794][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.083981][ T9060] device bridge_slave_0 entered promiscuous mode [ 270.118996][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.126934][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.137070][ T9072] device bridge_slave_0 entered promiscuous mode [ 270.144767][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.154649][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.162846][ T9060] device bridge_slave_1 entered promiscuous mode [ 270.193055][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.200145][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.211235][ T9072] device bridge_slave_1 entered promiscuous mode [ 270.240138][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.278314][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.290610][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.302785][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.321416][ T9419] IPVS: ftp: loaded support on port[0] = 21 [ 270.337490][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 270.384467][ T9060] team0: Port device team_slave_0 added [ 270.393575][ T9060] team0: Port device team_slave_1 added [ 270.408307][ T9072] team0: Port device team_slave_0 added [ 270.427842][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 270.440276][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.447818][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.474488][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.486464][ T9072] team0: Port device team_slave_1 added [ 270.511657][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.518738][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.545703][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.562651][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.569658][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.596758][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.610339][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.617775][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.644230][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.664147][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.672058][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.679899][ T9244] device bridge_slave_0 entered promiscuous mode [ 270.690028][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.697556][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.705583][ T9244] device bridge_slave_1 entered promiscuous mode [ 270.723083][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.793168][ T9072] device hsr_slave_0 entered promiscuous mode [ 270.811544][ T9072] device hsr_slave_1 entered promiscuous mode [ 270.871059][ T9072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.878747][ T9072] Cannot create hsr debugfs directory [ 270.914421][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.973397][ T9060] device hsr_slave_0 entered promiscuous mode [ 271.011500][ T9060] device hsr_slave_1 entered promiscuous mode [ 271.051133][ T9060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.058703][ T9060] Cannot create hsr debugfs directory [ 271.084215][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.104703][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.113886][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.122289][ T9356] device bridge_slave_0 entered promiscuous mode [ 271.130768][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.138820][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.147827][ T9356] device bridge_slave_1 entered promiscuous mode [ 271.175434][ T8906] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.182678][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.190882][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.212945][ T9244] team0: Port device team_slave_0 added [ 271.233534][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.257196][ T9244] team0: Port device team_slave_1 added [ 271.265089][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.283076][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.294851][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.304031][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.311400][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.361833][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.370586][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.379426][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.386820][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.395162][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.405012][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.416836][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 271.438889][ T9356] team0: Port device team_slave_0 added [ 271.446855][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.457857][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.485072][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.496762][ T9072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.547835][ T9356] team0: Port device team_slave_1 added [ 271.554227][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.562526][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.589239][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.601125][ T9072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.660852][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.671684][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.702287][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.728449][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.737151][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.746065][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.755011][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.764222][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.772380][ T9072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.815723][ T9060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.873201][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.881325][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.909997][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.973121][ T9244] device hsr_slave_0 entered promiscuous mode [ 272.011603][ T9244] device hsr_slave_1 entered promiscuous mode [ 272.061260][ T9244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.069342][ T9244] Cannot create hsr debugfs directory [ 272.077200][ T9072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.125801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.134345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.144233][ T9060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.204454][ T8906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.219715][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.234359][ T9060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.285261][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.294159][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.333117][ T9356] device hsr_slave_0 entered promiscuous mode [ 272.381527][ T9356] device hsr_slave_1 entered promiscuous mode [ 272.431522][ T9356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.440737][ T9356] Cannot create hsr debugfs directory [ 272.448002][ T9060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.512799][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.519853][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.527984][ T9419] device bridge_slave_0 entered promiscuous mode [ 272.576597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.585198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.595870][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.604108][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.612309][ T9419] device bridge_slave_1 entered promiscuous mode [ 272.629714][ T8906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.656557][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.681781][ T9244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.733933][ T9244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.794402][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.829387][ T9244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.902386][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.909462][ T9244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.937727][ T9419] team0: Port device team_slave_0 added [ 272.945995][ T9419] team0: Port device team_slave_1 added [ 272.966201][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.975728][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.991872][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.000006][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.008698][ T9356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.054591][ T9356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.103587][ T9356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.159569][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.182647][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.190017][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.217866][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.231471][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.238564][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.265844][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.277269][ T9356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.357135][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.378866][ T8906] device veth0_vlan entered promiscuous mode [ 273.397402][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.405560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.414120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.423309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.432398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.442273][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.450432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.459116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.467001][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.476144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.484248][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.492578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.500696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.510250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.518796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.525932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.538699][ T8906] device veth1_vlan entered promiscuous mode [ 273.556647][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.565897][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.574672][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.584017][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.592932][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.600539][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.673341][ T9419] device hsr_slave_0 entered promiscuous mode [ 273.751682][ T9419] device hsr_slave_1 entered promiscuous mode [ 273.791471][ T9419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.799077][ T9419] Cannot create hsr debugfs directory [ 273.826872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.838500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.848060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.858528][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.867613][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.876499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.885671][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.895066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.905082][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.914856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.925537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.934548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.944078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.953635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.989720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.998903][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.007558][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.017619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.026108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.035149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.045282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.055498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.065243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.073804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.083824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.095422][ T9072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.119553][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.131184][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.155132][ T8906] device veth0_macvtap entered promiscuous mode [ 274.179390][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.195585][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.219649][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.229213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.239676][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.250299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.260703][ T8906] device veth1_macvtap entered promiscuous mode [ 274.285118][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.294837][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.303283][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.310802][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.348294][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.362907][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.373041][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.380779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.388979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.397479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.406107][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.418957][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.434263][ T8906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.444848][ T9419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.474160][ T9419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.515361][ T9419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.573507][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.582792][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.602372][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.622735][ T9419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.650219][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.659115][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.669933][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.677168][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.685391][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.693502][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.701790][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.710634][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.724044][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.754812][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.765490][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.774831][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.785430][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.794216][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.805057][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.812400][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.820262][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.832621][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.841102][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.853367][ T9072] device veth0_vlan entered promiscuous mode [ 274.863295][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.871771][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.929816][ T9060] device veth0_vlan entered promiscuous mode [ 274.950477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.959648][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.968170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.976997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.985765][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.995682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.004590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.013148][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.020181][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.075180][ T9060] device veth1_vlan entered promiscuous mode [ 275.096240][ T9072] device veth1_vlan entered promiscuous mode [ 275.109758][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.119145][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.129222][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.138373][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.148346][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.156898][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.165264][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.174121][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.183196][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.192339][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.200751][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.207933][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.215971][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.224440][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.233038][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.313263][ T9244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.328432][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:38:02 executing program 0: dup(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) getgid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) [ 275.385967][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.396382][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.415184][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.442583][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.450829][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.486502][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.502036][ C0] hrtimer: interrupt took 33695 ns [ 275.512598][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.521184][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.530198][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.539591][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.548372][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.558327][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.588446][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.597723][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.608998][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.626187][ T9072] device veth0_macvtap entered promiscuous mode [ 275.651312][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.661921][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.670906][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.679834][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.687404][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.696736][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.712448][ T9060] device veth0_macvtap entered promiscuous mode [ 275.725952][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.734389][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.743095][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.751091][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.760743][ T9072] device veth1_macvtap entered promiscuous mode [ 275.773337][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.787423][ T9060] device veth1_macvtap entered promiscuous mode [ 275.797762][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.811543][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.831289][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.843005][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.863095][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.879509][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.892274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.900656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.909254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.918582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.927708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.935841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.947206][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.959049][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.971624][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.984939][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.995553][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.005578][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.016042][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.026932][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.036274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.045236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.054190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.063061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.071373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.078500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.086584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.095531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.104662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.126009][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.134791][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.145712][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.152782][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.160782][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.174083][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.184745][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.195953][ T9060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.206801][ T9060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.218772][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1 23:38:03 executing program 0: 23:38:03 executing program 0: 23:38:03 executing program 0: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) madvise(&(0x7f00003ec000/0x400000)=nil, 0x400000, 0x1000000000014) [ 276.323401][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.342234][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.350875][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.373401][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.392075][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 23:38:04 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) [ 276.544216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.562635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:38:04 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}}, 0x0) 23:38:04 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000400000009000100666c6f7700"], 0x5c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 276.588416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.612308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.621086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.643829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.656899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.666388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.675691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.685127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.749426][ T9244] device veth0_vlan entered promiscuous mode [ 276.767451][T10191] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.780661][ T9419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.795833][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.805947][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.818424][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.827595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.839020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.859448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.928157][ T9244] device veth1_vlan entered promiscuous mode [ 276.952635][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.960733][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 23:38:04 executing program 1: 23:38:04 executing program 0: [ 276.976201][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.996661][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.065447][ T9356] device veth0_vlan entered promiscuous mode [ 277.073442][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.080977][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.122999][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.136795][ T9356] device veth1_vlan entered promiscuous mode [ 277.165568][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.173803][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.190922][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.213381][ T9244] device veth0_macvtap entered promiscuous mode [ 277.227096][ T9244] device veth1_macvtap entered promiscuous mode [ 277.263997][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.278070][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.289029][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.302541][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.316890][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.329218][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.341049][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.374344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.385106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.402422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.410406][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.425469][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.435563][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.445335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.458477][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.470022][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.486260][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.497052][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.508848][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.519347][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.531841][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.542081][ T9356] device veth0_macvtap entered promiscuous mode [ 277.559635][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.570765][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.580403][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.594161][ T9356] device veth1_macvtap entered promiscuous mode [ 277.611881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.620664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.707648][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.723216][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.734290][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.744825][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.755586][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.766328][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.776377][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.787117][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.799727][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.849715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.858598][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.871284][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.882500][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.892774][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.904906][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.915332][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.926102][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.936325][ T9356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.947692][ T9356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.959750][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.051258][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.060042][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.076226][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.085044][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.095644][ T9419] device veth0_vlan entered promiscuous mode 23:38:05 executing program 3: [ 278.111086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.120006][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.140250][ T9419] device veth1_vlan entered promiscuous mode [ 278.294955][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.303843][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.322169][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.330668][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 23:38:05 executing program 4: [ 278.365522][ T9419] device veth0_macvtap entered promiscuous mode [ 278.381194][ T9419] device veth1_macvtap entered promiscuous mode [ 278.424305][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.452001][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.471848][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.483687][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.494896][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.505798][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.516891][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.527894][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.538193][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.549144][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.561574][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.570401][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.579664][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.602801][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.611619][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.624844][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.639368][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.649770][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.663848][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.676018][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.687683][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.697809][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.708723][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.718954][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.730200][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.741501][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.758548][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.767970][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 23:38:06 executing program 5: 23:38:06 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000400000009000100666c6f7700"], 0x5c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:38:06 executing program 0: 23:38:06 executing program 1: 23:38:06 executing program 3: 23:38:06 executing program 4: 23:38:06 executing program 3: 23:38:06 executing program 1: 23:38:06 executing program 0: 23:38:06 executing program 4: 23:38:06 executing program 5: [ 279.111546][T10234] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:38:06 executing program 2: 23:38:06 executing program 3: 23:38:06 executing program 0: 23:38:06 executing program 1: 23:38:06 executing program 5: 23:38:06 executing program 4: 23:38:06 executing program 3: 23:38:06 executing program 1: 23:38:06 executing program 2: 23:38:06 executing program 4: 23:38:06 executing program 5: 23:38:07 executing program 0: 23:38:07 executing program 3: 23:38:07 executing program 1: 23:38:07 executing program 2: 23:38:07 executing program 4: 23:38:07 executing program 5: 23:38:07 executing program 0: 23:38:07 executing program 3: 23:38:07 executing program 1: 23:38:07 executing program 2: 23:38:07 executing program 4: 23:38:07 executing program 5: 23:38:07 executing program 0: 23:38:07 executing program 3: 23:38:07 executing program 1: 23:38:07 executing program 2: 23:38:07 executing program 4: 23:38:07 executing program 5: 23:38:07 executing program 0: 23:38:07 executing program 3: 23:38:07 executing program 1: 23:38:07 executing program 4: 23:38:07 executing program 2: 23:38:07 executing program 5: 23:38:07 executing program 0: 23:38:07 executing program 3: 23:38:07 executing program 5: 23:38:07 executing program 4: 23:38:07 executing program 2: 23:38:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fanotify_init(0x2, 0x0) 23:38:07 executing program 0: 23:38:07 executing program 4: 23:38:07 executing program 3: 23:38:07 executing program 5: 23:38:08 executing program 0: 23:38:08 executing program 2: 23:38:08 executing program 1: 23:38:08 executing program 4: 23:38:08 executing program 0: 23:38:08 executing program 5: 23:38:08 executing program 3: 23:38:08 executing program 1: 23:38:08 executing program 2: 23:38:08 executing program 4: 23:38:08 executing program 5: 23:38:08 executing program 3: 23:38:08 executing program 0: 23:38:08 executing program 2: 23:38:08 executing program 1: 23:38:08 executing program 4: 23:38:08 executing program 5: 23:38:08 executing program 3: 23:38:08 executing program 2: 23:38:08 executing program 0: 23:38:08 executing program 1: 23:38:08 executing program 4: 23:38:08 executing program 5: 23:38:08 executing program 2: 23:38:08 executing program 3: 23:38:08 executing program 0: 23:38:08 executing program 1: 23:38:08 executing program 4: 23:38:08 executing program 2: 23:38:08 executing program 5: 23:38:08 executing program 3: 23:38:08 executing program 1: 23:38:08 executing program 0: 23:38:08 executing program 4: 23:38:08 executing program 2: 23:38:09 executing program 4: 23:38:09 executing program 0: 23:38:09 executing program 5: 23:38:09 executing program 3: 23:38:09 executing program 2: 23:38:09 executing program 1: 23:38:09 executing program 4: 23:38:09 executing program 5: 23:38:09 executing program 0: 23:38:09 executing program 3: 23:38:09 executing program 1: 23:38:09 executing program 2: 23:38:09 executing program 3: 23:38:09 executing program 5: 23:38:09 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x8c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/n\xcb2\x88\x1d\xf9\xff\xe7\xdc[\x17\x8b\xb2\xf7W\xf0\x06\x00\x00@\xc8k\xc0\xa5veli', 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x2008000fffffffe) 23:38:09 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4e83, 0xcd) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:09 executing program 1: 23:38:09 executing program 2: 23:38:09 executing program 3: 23:38:09 executing program 5: [ 282.049140][ T28] audit: type=1800 audit(1589585889.568:2): pid=10356 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15777 res=0 23:38:09 executing program 5: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="f3f33e6526f20f0174093e0f20050f20d80f22d8d8d3b807008ed866b9850500000f32660f3880bd07002e3e0f789b0080b804008ec00f01c5", 0x39}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:38:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 282.130223][ T28] audit: type=1800 audit(1589585889.648:3): pid=10352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15777 res=0 23:38:09 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x0}) 23:38:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2d82, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000200)='./file0\x00', 0x240000, 0xfa) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000004780)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050200000000000000000500000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000c40)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @random="20e8b49cdc19", @dev={0xac, 0x14, 0x14, 0x2f}}}}}, 0x0) 23:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d94}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x407412ec, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 282.296594][T10366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 282.318705][T10368] md: could not open device unknown-block(8,3). 23:38:09 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="110000006a00fd"], 0x20}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 282.354693][T10368] md: md_import_device returned -6 23:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d94}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x407412ec, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 282.424025][T10376] md: could not open device unknown-block(8,3). [ 282.466531][T10376] md: md_import_device returned -6 [ 282.559916][ T28] audit: type=1800 audit(1589585890.078:4): pid=10353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15783 res=0 23:38:10 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/n\xcb2\x88\x1d\xf9\xff\xe7\xdc[\x17\x8b\xb2\xf7W\xf0\x06\x00\x00@\xc8k\xc0\xa5veli', 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x2008000fffffffe) 23:38:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2d82, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000200)='./file0\x00', 0x240000, 0xfa) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000004780)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050200000000000000000500000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000c40)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @random="20e8b49cdc19", @dev={0xac, 0x14, 0x14, 0x2f}}}}}, 0x0) 23:38:10 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x20601, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x8) 23:38:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d94}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x401412fd, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:38:10 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xfffffffe}]}]}}, &(0x7f0000004600)=""/210, 0x32, 0xd2, 0x8}, 0x20) 23:38:10 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001240)=ANY=[], 0x1720) socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x0}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 282.829710][ T28] audit: type=1800 audit(1589585890.347:5): pid=10405 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15796 res=0 23:38:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xe}, [@call={0x56, 0x11, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 282.875133][T10410] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 282.901843][ T28] audit: type=1800 audit(1589585890.387:6): pid=10405 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15796 res=0 [ 282.916439][T10410] BPF: 23:38:10 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 282.941339][T10410] BPF:Invalid member name_offset:4294967294 [ 282.957970][T10410] BPF: [ 282.957970][T10410] [ 282.970818][T10410] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 283.024798][T10410] BPF: [ 283.027671][T10410] BPF:Invalid member name_offset:4294967294 [ 283.049549][T10410] BPF: [ 283.049549][T10410] 23:38:10 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x8001, 0x0) timer_create(0x0, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x20, 0x8) 23:38:10 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe880000000000df000000000000000114000400ff00000c000000000000000000000001080007000000000024000f"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffeb2, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 23:38:10 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 23:38:10 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000c40)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @random="20e8b49cdc19", @dev}}}}, 0x0) 23:38:10 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '['}, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000100)=""/236, 0x20000118) 23:38:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000007000000000000000000000404000000000000000000000201000000000000000100000400000002000000f0"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20) [ 283.163338][T10425] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 283.230382][ T28] audit: type=1804 audit(1589585890.747:7): pid=10430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/" dev="sda1" ino=91 res=1 23:38:10 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xbcc4, r1}, 0x38) [ 283.273064][ T28] audit: type=1804 audit(1589585890.777:8): pid=10430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/" dev="sda1" ino=91 res=1 23:38:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x17a) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) fremovexattr(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) semop(0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 283.322998][T10436] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 283.337512][T10436] BPF: [ 283.340684][T10436] BPF:Invalid member name_offset:4026531840 [ 283.350308][T10436] BPF: [ 283.350308][T10436] [ 283.370034][T10436] BPF: (invalid-name-offset) type_id=0 bits_offset=0 [ 283.387310][T10436] BPF: [ 283.395024][T10436] BPF:Invalid member name_offset:4026531840 [ 283.409904][T10436] BPF: [ 283.409904][T10436] 23:38:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="f3f33e6526f20f0174093e0f20050f20d80f22d8d8d3b807008ed866b9850500000f32660f3880bd07002e3e0f789b0080b804008ec00f01c5", 0x39}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 283.495813][ T28] audit: type=1800 audit(1589585891.017:9): pid=10441 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15786 res=0 23:38:11 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x800fe) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, r1}, 0x38) 23:38:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x400c12f5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:38:13 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1278, &(0x7f0000001200)={0x0, 0x0, 0x3, 0x0}) 23:38:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x17a) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) fremovexattr(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) semop(0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 23:38:13 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x800fe) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000002c0027b900000000000000000000f000", @ANYRES32=r2, @ANYBLOB="00000000000000000000f1ff0c0001"], 0x44}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 23:38:14 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x800fe) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:14 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xbcc4, r1}, 0x38) [ 286.942402][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.026838][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.087330][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.149866][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.205342][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.281324][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 23:38:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="f3f33e6526f20f0174093e0f20050f20d80f22d8d8d3b807008ed866b9850500000f32660f3880bd07002e3e0f789b0080b804008ec00f01c5", 0x39}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:38:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xe, 0x2}, [@call={0x179, 0x11, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:38:15 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x800fe) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setparam(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="f3f33e6526f20f0174093e0f20050f20d80f22d8d8d3b807008ed866b9850500000f32660f3880bd07002e3e0f789b0080b804008ec00f01c5", 0x39}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001240)=ANY=[], 0x1720) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x0}) 23:38:15 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xbcc4, r1}, 0x38) 23:38:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001240)=ANY=[], 0x1720) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x3, 0x0}) 23:38:16 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x200, 0x200, 0x200, 0x200, 0x5, 0x2c8, 0x308, 0x308, 0x2c8, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x200, 0x200, 0x200, 0x200, 0x5, 0x2c8, 0x308, 0x308, 0x2c8, 0x308, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "585df8b60a4512ad52358c4ea90d706323110d7c1049bccb554d43e93500"}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) pause() 23:38:16 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) exit_group(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) 23:38:16 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x800fe) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:38:16 executing program 1: open(0x0, 0x0, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000000c0)='system.posix_acl_access\x00'}, 0x30) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xbcc4, r1}, 0x38) 23:38:18 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x87, 0x6c, 0x8000000000000002, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xbcc4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0xbcc4, r1}, 0x38) [ 291.508448][T10554] ================================================================== [ 291.516688][T10554] BUG: KCSAN: data-race in bpf_lru_pop_free / htab_lru_map_update_elem [ 291.525516][T10554] [ 291.527838][T10554] write to 0xffff8880a001214b of 1 bytes by task 10553 on cpu 1: [ 291.535546][T10554] htab_lru_map_update_elem+0x4a1/0x680 [ 291.541097][T10554] bpf_map_update_value.isra.0+0x3bc/0x420 [ 291.546886][T10554] generic_map_update_batch+0x273/0x3c0 [ 291.552436][T10554] bpf_map_do_batch+0x194/0x3a0 [ 291.557283][T10554] __do_sys_bpf+0x1cca/0x3100 [ 291.561961][T10554] __x64_sys_bpf+0x47/0x60 [ 291.566359][T10554] do_syscall_64+0xc7/0x3b0 [ 291.570842][T10554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.576709][T10554] [ 291.579017][T10554] read to 0xffff8880a001214b of 1 bytes by task 10554 on cpu 0: [ 291.586621][T10554] bpf_lru_pop_free+0x6a4/0xa30 [ 291.591537][T10554] prealloc_lru_pop+0x30/0x70 [ 291.596196][T10554] htab_lru_map_update_elem+0x352/0x680 [ 291.601719][T10554] bpf_map_update_value.isra.0+0x3bc/0x420 [ 291.607501][T10554] generic_map_update_batch+0x273/0x3c0 [ 291.613018][T10554] bpf_map_do_batch+0x194/0x3a0 [ 291.617868][T10554] __do_sys_bpf+0x1cca/0x3100 [ 291.622519][T10554] __x64_sys_bpf+0x47/0x60 [ 291.626914][T10554] do_syscall_64+0xc7/0x3b0 [ 291.631392][T10554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.637281][T10554] [ 291.639601][T10554] Reported by Kernel Concurrency Sanitizer on: [ 291.645823][T10554] CPU: 0 PID: 10554 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 291.654480][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.664543][T10554] ================================================================== [ 291.672788][T10554] Kernel panic - not syncing: panic_on_warn set ... [ 291.679637][T10554] CPU: 0 PID: 10554 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 291.688282][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.698331][T10554] Call Trace: [ 291.701609][T10554] dump_stack+0x11d/0x187 [ 291.706268][T10554] panic+0x210/0x640 [ 291.710143][T10554] ? vprintk_func+0x89/0x13a [ 291.714798][T10554] kcsan_report.cold+0xc/0x1a [ 291.719472][T10554] kcsan_setup_watchpoint+0x3fb/0x440 [ 291.724823][T10554] bpf_lru_pop_free+0x6a4/0xa30 [ 291.729656][T10554] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 291.735472][T10554] prealloc_lru_pop+0x30/0x70 [ 291.740144][T10554] htab_lru_map_update_elem+0x352/0x680 [ 291.745949][T10554] bpf_map_update_value.isra.0+0x3bc/0x420 [ 291.751749][T10554] generic_map_update_batch+0x273/0x3c0 [ 291.757280][T10554] ? generic_map_delete_batch+0x390/0x390 [ 291.762979][T10554] bpf_map_do_batch+0x194/0x3a0 [ 291.767816][T10554] __do_sys_bpf+0x1cca/0x3100 [ 291.772484][T10554] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 291.778362][T10554] ? __read_once_size+0x45/0xd0 [ 291.783452][T10554] ? ktime_get_ts64+0x286/0x2c0 [ 291.788284][T10554] __x64_sys_bpf+0x47/0x60 [ 291.792681][T10554] do_syscall_64+0xc7/0x3b0 [ 291.797180][T10554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.804114][T10554] RIP: 0033:0x45c829 [ 291.807999][T10554] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.827614][T10554] RSP: 002b:00007f6de0cc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.836023][T10554] RAX: ffffffffffffffda RBX: 00000000004da4e0 RCX: 000000000045c829 [ 291.843980][T10554] RDX: 0000000000000038 RSI: 0000000020000080 RDI: 000000000000001a [ 291.852012][T10554] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 291.860046][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 291.868427][T10554] R13: 0000000000000064 R14: 00000000004c3049 R15: 00007f6de0cca6d4 [ 292.981530][T10554] Shutting down cpus with NMI [ 292.987861][T10554] Kernel Offset: disabled [ 292.992283][T10554] Rebooting in 86400 seconds..