[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. 2020/05/15 18:55:04 fuzzer started 2020/05/15 18:55:04 dialing manager at 10.128.0.26:42825 2020/05/15 18:55:04 syscalls: 2842 2020/05/15 18:55:04 code coverage: enabled 2020/05/15 18:55:04 comparison tracing: enabled 2020/05/15 18:55:04 extra coverage: enabled 2020/05/15 18:55:04 setuid sandbox: enabled 2020/05/15 18:55:04 namespace sandbox: enabled 2020/05/15 18:55:04 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/15 18:55:04 fault injection: enabled 2020/05/15 18:55:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/15 18:55:04 net packet injection: enabled 2020/05/15 18:55:04 net device setup: enabled 2020/05/15 18:55:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/15 18:55:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/15 18:55:04 USB emulation: /dev/raw-gadget does not exist 18:57:36 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x341, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fsync(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xc8b}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0xc880) write$capi20(r0, &(0x7f0000000240)={0x10, 0x8001, 0x87, 0x81, 0xfff, 0x800}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000300)="4380de1a644e881f25f44b479f0d1bebcf0a8e39b5cbbc8338ab600687b2911ffc89ec544035d5", 0x27}, {&(0x7f0000000340)="63327e70c3d26c0b32d5ba377baa6d84156ff45c4357c52ae253f161c5122d4a498f135c8e92e0f97b8ef791ef92fbc50accc927ff1cecfee7820d9b206a33e6542ad1c9bc311763133202769cc72d40bdc9570c93530a628ddc20a6a928ec08bcd37b9709", 0x65}, {&(0x7f00000003c0)="c7a38d2114ab5d924c0195d3b0a8848bf57d355343b26b3a6376753376a0312f9ff3fa6845c38a2b47d7d08a8c58641a3823debf48df0662a37fb9951311be528ba729509afda20c51087d27ab1cad60d76b9fb10ed62675255c94e874debe680241a431f6c065e73b4ba8a1efea248391a89624e8f889e422efd03a1876eb10e818b55f0abeedd1abfb187151315f17a4f65711d63c341fb3d8ee8282bb6140b1e7c6e5c5bac45288f0d52af5a2827e80dfcae3db698cb91ce4e7e8b352d363d44e7b06cfd8861852c849a6ea16cf6a65c06c5406480841", 0xd8}, {&(0x7f00000004c0)="9b59f7ee751eaa2c1955b075391b3d7717b1de15d88113916e451d5cc35ac87c879f7c99b225e3c049fa2127e52b8b", 0x2f}, {&(0x7f0000000500)="e83d1bde058bc114cb7b80a7ade554f74e179de4d2420b2cb3bf3b2bd7fdd346b65cbc9d8ba091cfd58a717392052e5381051796c67f749d91685412f234a020a32d0e17ef44c66eb747c016072f4d2c29cfc58f78e146e0074490de39acd7119d7d25006c4278c1258661f158fd6dc7ac8bef4d2baac2742196c26bf0e43617005e2b4e08cd59a96d66", 0x8a}, {&(0x7f00000005c0)="5918bc42e89033baa10b722eba8cb5b3c8713940971ab466f6f211bda7b8ea85b47d071e3c23d40011160f3dd9ee2987bad10ff7d3b27e389d0326f5cdd25ff1d66591ba215da41b8c29d83ff36947aa2ec1ba5680daca5fdf02af2c16d86b9aad3bea1ee948ae3b4b0c18b2a271324e24bfdf65a77c051645855c286c71743ee836", 0x82}, {&(0x7f0000000680)="b9a9d6967b531090854c70d5e470e44cff1ff16d62765f991466fca0ba045e1970ef9f013d58fc16473aca9e98825ee393f4b76c289d899a24288d8a3ea04b7bf5b1a4115871cb4994c2acdbdff6b1b4c543c4cb25f94b42a706536c237842cd1c19fbd4883b4c50cd39c2e28ac52bc7c4132cebf2a27b8439422585f848d653ead2785967564c7ab82ff3a904356aa3c0fcd26bb0e199a3e0e84a9c3c50f8a99a5b5997edb376a4e2049327a3672ca2cecc6b25f90e9822fcdef9c2d247fb07bbca3498a8c213c679cd78632796f1d2c553fb2c62650d5fa742362cb17c1c9732c2", 0xe2}], 0x7, 0x0, 0x0, 0x4}, 0x8dcfa415d32aefa) openat$bsg(0xffffffffffffff9c, &(0x7f0000000840)='/dev/bsg\x00', 0x40, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r4 = creat(&(0x7f0000000980)='./file0\x00', 0xe0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000009c0)=0xfff9, 0x2) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) pwrite64(r5, &(0x7f0000000a00)="ba8ca45dc6bdc35f3ef1360bca435d8a92a088840ad0972b77c5a69b75e46ada163ec71e9e0c91c05e41d62d04303238dd184bb82629811a9521add9cd1da9069ed1591239d7963b0200ee50f21beff9762d991ba45b8decc330dad3a52656c3988d4115283b3cfb26901f6a7f82057ff5069e902099145b0aa866f114364c99b9845562642c68247dbeccc11a90716a388e2e645093964610eb46cfe56547b46884430a2bb5a0b0", 0xa8, 0x8001) fstat(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000cc0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x2000, 0x400, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='system.posix_acl_access\x00', &(0x7f0000001400)={{}, {}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r8}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {}], {0x4, 0x3}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x1, 0xee01}], {}, {0x20, 0x1}}, 0x94, 0x3) syzkaller login: [ 208.354029][ T7038] IPVS: ftp: loaded support on port[0] = 21 18:57:36 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) r2 = getuid() r3 = getegid() getgroups(0x3, &(0x7f0000000140)=[0x0, 0xee00, 0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x4, r0}, {0x2, 0x1, r1}, {0x2, 0x5, r2}], {}, [{0x8, 0x6, r3}, {0x8, 0x0, r4}, {0x8, 0x7, r5}, {0x8, 0x2, 0xee00}, {0x8, 0x8}, {0x8, 0x2, r6}, {0x8, 0x2, r7}, {0x8, 0x6, r8}], {0x10, 0x5}, {0x20, 0x1}}, 0x7c, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0x3f30, 0x0, 0x2, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000480)={0x70600553, r10, 0x2, 0xffff}) r11 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/input/mice\x00', 0x2040) sendmsg$NLBL_CALIPSO_C_LISTALL(r11, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$KVM_GET_MSRS(r11, 0xc008ae88, &(0x7f0000000640)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000007c0)={r12, 0x1, 0x6, @local}, 0x10) write$FUSE_NOTIFY_DELETE(r11, &(0x7f0000000800)={0x2f, 0x6, 0x0, {0x2, 0x5, 0x6, 0x0, 'team0\x00'}}, 0x2f) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000880)={0x2, {0xc6e, 0x400, 0x0, 0x5}}) [ 208.505045][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 208.616608][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.634684][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.654536][ T7038] device bridge_slave_0 entered promiscuous mode [ 208.676391][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.687361][ T7168] IPVS: ftp: loaded support on port[0] = 21 [ 208.697037][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.714873][ T7038] device bridge_slave_1 entered promiscuous mode 18:57:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)=""/252, &(0x7f0000000100)=0xfc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0x7f, 0x2, {0xffffffffffffffff, 0x2, 0x400, 0x1, 0x8}, 0x101}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x290003, 0x0) getpeername$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) r4 = fanotify_init(0x8, 0x1000) fremovexattr(r4, &(0x7f0000000300)=@known='com.apple.FinderInfo\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x12e80, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x2, 0xeb1, {0xffffffffffffffff}, {0x0}, 0xfffffffffffffff7, 0x7fff}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000003c0)={0x6, 0x22ac2406, {0xffffffffffffffff}, {r6}, 0x0, 0x9}) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000400)={0x8001, 0x9fe, 0x1f}) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) write$binfmt_elf32(r7, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0x6, 0x9, 0xc131, 0x2, 0x6, 0x1, 0x36a, 0x38, 0x1c7, 0xcb18, 0x101, 0x20, 0x1, 0x5, 0x1, 0x4}, [{0x5, 0x3, 0x3, 0x101, 0x1, 0x9, 0x8, 0x8}, {0x3, 0x8, 0x0, 0x8, 0x8, 0x2, 0x3, 0x6d}], "48cecbe69e599ef6dc41b9cf71ad28e043aabc38c97d893a37d7de6d8260b3a609ecba574a5953c0ca72e35d689d6ffd448465d6d55ab9b2e05a2e1c2c86e46c7c8d5bf86e8960822a878505c6d685bde6b70ac8bb7895a39b324115c4b152fedcc2d97003802427895a201a2d644a00a58ab0d1aa46bbbb520676eae577b365d40579f7312466ad7d9dba98bc3c8d2115ab107f5419471fc1c9bd3d0500b50761e247a6a29f86835cb5f6554e8920c51b88eb0bf1ed913908240e83f61494920f3314adfe8f26d4c83b67cee5033491122b250c04bd2410d0aca6dff83d5674270351ba31ef46f2f3b06b7d8c68c7ec22d4", [[], [], [], [], [], [], [], [], [], []]}, 0xb6a) socket$pppoe(0x18, 0x1, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000001000)='/dev/vcsa#\x00', 0x7, 0x96600) sendmsg$can_raw(r8, &(0x7f0000001100)={&(0x7f0000001040), 0x10, &(0x7f00000010c0)={&(0x7f0000001080)=@can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "f3f61d2ca7959a94"}, 0x10}, 0x1, 0x0, 0x0, 0x4041}, 0x98) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000001140)=0x1c34) getgid() [ 208.768630][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.795818][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.865053][ T7038] team0: Port device team_slave_0 added [ 208.898596][ T7038] team0: Port device team_slave_1 added [ 208.932064][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.963641][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.013474][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.033321][ T7216] IPVS: ftp: loaded support on port[0] = 21 [ 209.035969][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.052995][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.080811][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:57:37 executing program 3: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "7910aa98ae3705606316e620ab96c7a8"}, 0x11, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fff, 0x30140) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x42000) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0xfff, 0x31384142, 0x2, @discrete={0x8, 0x10000}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000300)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000003c0)=""/249) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x10d000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000500)={{0x62, @broadcast, 0x4e24, 0x2, 'lblc\x00', 0x28, 0x1, 0x2e}, {@broadcast, 0x4e22, 0x3, 0x1, 0x50, 0xe00000}}, 0x44) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) fsetxattr$security_ima(r4, &(0x7f0000000580)='security.ima\x00', &(0x7f00000005c0)=@v1={0x2, "e70fce1828f58f11ed091defd1abea46fab4"}, 0x13, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001f40)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001f80)={0x9, 0xffffffff, {0xffffffffffffffff}, {0xee01}, 0x889, 0x100000000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)=[{&(0x7f0000000640)={0x10, 0x1f, 0x400, 0x70bd27, 0x25dfdbfb}, 0x10}, {&(0x7f0000000680)={0xa4, 0x34, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="111ea88771372937e32a9e77a7e44134d93722bad8244d4cd34d670854fecd4a808db6d066e568a75b05b16bde319672fb7da03cf62f2851681d74fca0735e398cfea4e4a8fdaa7c033afe91aae8ae85847bf40665c6ff633911422b4ae182481b9099eeaa4c856af175f7ae2be031cd4c9b083de01c0fa91f93487fe5435f7644619219750fc90ace472b7ab78d6daca73f22"]}, 0xa4}, {&(0x7f0000000740)={0xc4, 0x34, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@generic="eecc8814e7a353c028ccb15b95c9e88b8c18bc2d58e13d4a4331b7311931885b97884a9316bb3d4ea8592484f6dadc841be0a48ef4e21fa6fa4eb2542fdd4c4870c7a0e34c3ecb54797ff13693d9387951d4ad0bb4d01239c30f5b56c60ffa3f41df80c9ea8ef80268b551af3f61e79f770d1f8f4f1ba197b2e2ccfaec65832c5a8ddb19ab971ed45ec8627813fca03faca7be038089ba986676d284994cc8c639826effabf98076b76163429c053c7449"]}, 0xc4}, {&(0x7f0000000840)={0x3b0, 0x1e, 0x400, 0x70bd25, 0x25dfdbfd, "", [@generic="98017166f030fb9ecbeb5372", @nested={0x239, 0x24, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="635138336f0d1c61a96c48cd399d872db32d3f8e695991e2f24664de7604b137cef0ddc34138fa3b1a1bb2e7dd00d9c9ba67dcf6b1b342ca65e0a3ea36488e0c71f44d220b4ee2fcb21416bb26c27253e87a867db3ce0464a1c25feea4a5121ed358d77ff11dcd30da89ac185bd90f", @generic="5056909b3997248b163c5cf27d824682666595b7f44f3870aca6e2d598f81d9ba2981cd427f64c6e1157edcf5047be351f7c0ca5150fa5db419cfcdd4ee1aede626977421d488f3199b7584d709a6c5eb1acf00092a0cb0c26b03655020bfe7b804ceb9cd72259d1474a44c8f959d91904e919c8fddc49740b910d51e010294e8833c54ac44154ac546eb7174e341debe69f6cd5be2cc9954387aadb930827f1bee5dbaf3001c21b2ef1", @typed={0xfc, 0x73, 0x0, 0x0, @binary="0b09964f6374e467dd06186af7eae908a22f9a8a31c002966bc372c09a3fcfe3220dfccc7392d23d2925675493aa7985fda82c7663111aac0cff7d578f532045455153d1c44c0c6c85ac075c3e653ef77a6df857262d8913b3e0e330c8158a6cd196ca0c6e2b4091a2d92c7490f7362fb83a9635dbd700ad6f4be2fa03739f046cfd61728f66022a8a2f0be28fd1709c80f5ec331bb1acaa105776661781caef4e351a4113e5d6113ee34bf8b9c7cb233a0bd1a9b6ccb96c62be1d51271020e663ebca33833230ab0ba51c495707f3b53e15e32d83218edb20ca4db0d1e3c6b2ba9c846955e339888f4fe88d27f8cda8fdc75d8b232f26da"}]}, @typed={0x4, 0x7f}, @generic="471f27e580b161e13bcc56b5d56e6a792dcd3ab49f4069698abf93389dd3eec54960", @generic="5ae2f623755d957570f453e5cdcae1cafe91c448ec9a69d6e9714667a924c75883fc1afc4a49ee4057798059aa624bf931efe7f1f0aa929773927b6b0fbbcd139b7b9d35dfc5e47a568da94b45736059a72ebf7b34ecfeb1ff671561635aa20684ae3a5b", @typed={0xc9, 0xb, 0x0, 0x0, @binary="43af7456fa67e7129fafa655058a920cbe962c5977a47903ed09ff3ccfe0eea742afe9550ffbdaf1791e5c8ef7bbd99983cbf065ca88b1c15f66adcff6da12c07b64cf6c3e8a428fce1a73f74c71f5d1d9f050983a3c40e81fc8c3d9cfadfdb38e2e2ea25b39437b9e19fc0c91f36aada28e03adee5b8940b5eb039752b0353761c18a30c3ff1b0099b0be26813bf2cced758755715fff0d5cffb85a8ce7a87df76209e7e15b3845a571b76f14bfd27d266561388740bb83d2aa6a517040732acc6863f803"}]}, 0x3b0}, {&(0x7f0000000c00)={0x1010, 0x17, 0x20, 0x70bd28, 0x25dfdbfd, "", [@generic="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"]}, 0x1010}, {&(0x7f0000001c40)={0x218, 0x11, 0x800, 0x70bd25, 0x25dfdbfb, "", [@typed={0xfa, 0x2e, 0x0, 0x0, @binary="cf802f908758004803abd255be59c399243925737cff79aa51b184e4de785d6e26e5703ddeaa6b66340dbe84669dc6e15f166d997dcad8efc41f92849786a52c42f2cd19b43dc9e625e4cb6cb23f094ab59b687993cf6e3cc4e2f85522b6663c5e5e19459f0eabf2a7331277ceeb352fec4c153551c9e622742b91429ea569e6c735e9bf689c0eb12a2dbfa05e14768451334e7ba129e3551a6cf0a6b5d9a31c40e0e22a226a2bfd294bb37918e6140a6c2f5e51fbb426a4d3a831aaf8f65dfc4cb335dbc40c0c9f77232a3d2a46d94f5dbb076c27b320ae1813a931ee5ccaf6e2238571212c87c294c2b84e8d55eb8cd120147a35bd"}, @generic="b56b2df741a6695eddc6677fef26a195dca2e3d02d7cf81b86494ecb134f01d961c17aaa2310ffa1040ab20c7f3d908bbeb888ae3b80f4ccc5a4edaf128e5f096809d51c445cf2ce9359f0146c357ed71c36992626796e0671f0bda0c8c7887ad670460f8f3e5459336d95af4267fb8076c00e416275b46f8db4cf191a19a1cd1333fcc283d88e6b489deb992ad3919b19fe0d55cee38abedd780c3d681e9b75d225d4e78d3d826bfed5c45790605ec4c39559cb878d354e96fce1d959b67478936ad6aad91bb597d60c0dfb84", @generic="33e13c915413f4f4cda85fe660f054a5197d7fd7e56dc2921916241a4b26da270d21ce5bc75f5b9d55930a705228e718e3986357dfd38d1e3699e40e"]}, 0x218}, {&(0x7f0000001e80)={0x14, 0x17, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x8}]}, 0x14}], 0x7, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x90, 0x10}, 0x4000011) [ 209.278470][ T7038] device hsr_slave_0 entered promiscuous mode [ 209.335866][ T7038] device hsr_slave_1 entered promiscuous mode [ 209.372570][ T7317] IPVS: ftp: loaded support on port[0] = 21 [ 209.438456][ T7168] chnl_net:caif_netlink_parms(): no params data found 18:57:37 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x523001) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/147) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x1c, 0x11, 0x7c, &(0x7f0000000100)}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x2, 0x0) clock_getres(0x5, &(0x7f0000000700)) r2 = msgget$private(0x0, 0x138) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000740)=""/160) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$TIOCEXCL(r3, 0x540c) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000840)) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000a80)) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/input/mice\x00', 0x202400) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x27a) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000b00)={0x5, "5b66b1ee357ed660772eccb532d5d5f4f003bd7f6906901babc14fe33d04ccc4", 0x2, 0x40, 0x7, 0x4, 0x2}) r5 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000b80)={0x7}) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/md0\x00', 0x10100, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r6) [ 209.734371][ T7423] IPVS: ftp: loaded support on port[0] = 21 [ 209.797331][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.805315][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.815928][ T7168] device bridge_slave_0 entered promiscuous mode [ 209.841376][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.849652][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.861014][ T7168] device bridge_slave_1 entered promiscuous mode [ 209.877305][ T7216] chnl_net:caif_netlink_parms(): no params data found [ 209.919096][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.980635][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 18:57:38 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x20000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x1, 0x401}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x7, r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x600100, 0x0) tee(r2, r0, 0xffffffffffffffc5, 0x4) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x20, 0x40a400) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000180)) fcntl$notify(r2, 0x402, 0x2c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) sendfile(r4, r3, 0x0, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000280)='attr\x00') r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x40, 0x0) close(r7) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000003c0)={0x200, 0x1, 0x4, 0xfffffffd, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000440)={r9, 0xff, 0x5, [0xe5cf, 0x1, 0x2, 0x313, 0x3f]}, &(0x7f0000000480)=0x12) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000004c0)={0x1f}) [ 210.189690][ T7168] team0: Port device team_slave_0 added [ 210.201930][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.210390][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.220050][ T7216] device bridge_slave_0 entered promiscuous mode [ 210.251577][ T7168] team0: Port device team_slave_1 added [ 210.271077][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.278864][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.287061][ T7216] device bridge_slave_1 entered promiscuous mode [ 210.288702][ T7650] IPVS: ftp: loaded support on port[0] = 21 [ 210.294855][ T7038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.336328][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 210.365515][ T7038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.430171][ T7038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.517651][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.539232][ T7038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.607294][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.614623][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.641124][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.662632][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.675682][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.702798][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.716983][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.836500][ T7168] device hsr_slave_0 entered promiscuous mode [ 210.883824][ T7168] device hsr_slave_1 entered promiscuous mode [ 210.923639][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.931506][ T7168] Cannot create hsr debugfs directory [ 210.949851][ T7216] team0: Port device team_slave_0 added [ 210.956717][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 210.999792][ T7216] team0: Port device team_slave_1 added [ 211.036647][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.045038][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.052843][ T7317] device bridge_slave_0 entered promiscuous mode [ 211.083499][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.090462][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.120248][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.148317][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.156134][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.166178][ T7317] device bridge_slave_1 entered promiscuous mode [ 211.190264][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.197702][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.224340][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.285131][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.298713][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.314996][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.322144][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.335354][ T7423] device bridge_slave_0 entered promiscuous mode [ 211.377247][ T7317] team0: Port device team_slave_0 added [ 211.392623][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.400008][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.409441][ T7423] device bridge_slave_1 entered promiscuous mode [ 211.457205][ T7216] device hsr_slave_0 entered promiscuous mode [ 211.513811][ T7216] device hsr_slave_1 entered promiscuous mode [ 211.553551][ T7216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.561382][ T7216] Cannot create hsr debugfs directory [ 211.579549][ T7317] team0: Port device team_slave_1 added [ 211.610702][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.617980][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.645250][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.675755][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.687462][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.710784][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.718421][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.745508][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.821583][ T7423] team0: Port device team_slave_0 added [ 211.834359][ T7423] team0: Port device team_slave_1 added [ 211.921079][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.929640][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.957012][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.972721][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.981248][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.009075][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.055722][ T7317] device hsr_slave_0 entered promiscuous mode [ 212.144130][ T7317] device hsr_slave_1 entered promiscuous mode [ 212.223493][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.231100][ T7317] Cannot create hsr debugfs directory [ 212.295406][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 212.366735][ T7423] device hsr_slave_0 entered promiscuous mode [ 212.413943][ T7423] device hsr_slave_1 entered promiscuous mode [ 212.474135][ T7423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.481712][ T7423] Cannot create hsr debugfs directory [ 212.531089][ T7168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.611202][ T7168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.701363][ T7168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.760277][ T7168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.885307][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.892456][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.901391][ T7650] device bridge_slave_0 entered promiscuous mode [ 212.936198][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.954315][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.962577][ T7650] device bridge_slave_1 entered promiscuous mode [ 212.991320][ T7216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.036933][ T7216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.088900][ T7216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.155885][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.169823][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.199773][ T7216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.278674][ T7650] team0: Port device team_slave_0 added [ 213.301703][ T7317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.337634][ T7317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.424143][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.432570][ T7650] team0: Port device team_slave_1 added [ 213.451447][ T7317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.502825][ T7317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.597280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.606841][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.620894][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.664299][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.671375][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.707057][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.728193][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.735495][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.761550][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.812473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.829459][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.839498][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.846710][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.897311][ T7650] device hsr_slave_0 entered promiscuous mode [ 213.955469][ T7650] device hsr_slave_1 entered promiscuous mode [ 214.043437][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.051016][ T7650] Cannot create hsr debugfs directory [ 214.096571][ T7423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.137894][ T7423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.206242][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.216391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.225715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.235166][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.242282][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.277980][ T7423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.326211][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.335185][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.368310][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.379324][ T7423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.467341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.477202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.486879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.496117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.505707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.513766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.522038][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.553544][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.567282][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.577442][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.622789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.633099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.642678][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.649787][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.663100][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.681179][ T7038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.695119][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.716146][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.729507][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.738739][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.748687][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.757907][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.766798][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.773938][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.823101][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.831794][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.840647][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.849020][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.877649][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.924690][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.931504][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.942938][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.952289][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.961460][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.970604][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.980548][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.989318][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.998325][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.007402][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.014510][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.023265][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.031952][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.040248][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.048380][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.081301][ T7650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.119105][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.138273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.150376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.159318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.166451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.175352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.184438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.192711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.201334][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.210623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.219652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.231014][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.241495][ T7650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.290514][ T7650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.346649][ T7650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.414043][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.421894][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.432063][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.441745][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.456454][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.501722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.511058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.525662][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.536613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.592777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.602062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.612423][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.619541][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.627883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.636930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.645712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.655691][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.666213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.675426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.684754][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.691804][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.700150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.708792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.722907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.731682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.739898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.767747][ T7038] device veth0_vlan entered promiscuous mode [ 215.777682][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.794985][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.811400][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.821263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.831732][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.839640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.847559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.857928][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.871796][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.936075][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.948854][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.958842][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.968997][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.978298][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.985442][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.993540][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.002297][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.011651][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.018759][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.027240][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.040261][ T7038] device veth1_vlan entered promiscuous mode [ 216.072407][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.081170][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.091440][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.100090][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.108733][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.118121][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.135263][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.176576][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.185630][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.201031][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.210768][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.221777][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.230974][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.240149][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.249243][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.256957][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.275768][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.294821][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.302877][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.312788][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.321720][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.329774][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.338099][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.346787][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.361018][ T7168] device veth0_vlan entered promiscuous mode [ 216.372312][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.387352][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.410939][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.419775][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.431684][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.441260][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.453307][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.461728][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.498667][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.520926][ T7038] device veth0_macvtap entered promiscuous mode [ 216.529573][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.542992][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.551180][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.564684][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.572971][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.580077][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.592972][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.602163][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.615478][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.622530][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.631616][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.640614][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.649870][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.658551][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.667965][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.676214][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.687490][ T7168] device veth1_vlan entered promiscuous mode [ 216.747421][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.756481][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.767417][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.776566][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.785775][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.793607][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.801028][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.809055][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.817020][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.826329][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.844431][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.854124][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.862427][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.874327][ T7038] device veth1_macvtap entered promiscuous mode [ 216.899091][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.909168][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.930917][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.943403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.951833][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.967071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.976859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.988600][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.003489][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.021381][ T7168] device veth0_macvtap entered promiscuous mode [ 217.044062][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.052727][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.066178][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.076638][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.088526][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.115186][ T7168] device veth1_macvtap entered promiscuous mode [ 217.133463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.141901][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.152357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.180516][ T7216] device veth0_vlan entered promiscuous mode [ 217.212039][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.221583][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.231056][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.242029][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.252614][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.260949][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.352866][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 217.364905][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.377228][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.387179][ T7423] device veth0_vlan entered promiscuous mode [ 217.414376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.424839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.437266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.446284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.455840][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.465269][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.475449][ T7216] device veth1_vlan entered promiscuous mode [ 217.526706][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.544795][ T7423] device veth1_vlan entered promiscuous mode [ 217.559922][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.569147][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.578386][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.588630][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.597366][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 217.608695][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.625300][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.725294][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.735905][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.778650][ T8294] Unknown ioctl -2146914560 [ 217.810302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.831107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.846577][ T8294] Unknown ioctl -2146914560 18:57:46 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x4004092b, &(0x7f0000000380)={0x0, 0x0, 0x3e, 0x0}) [ 217.862226][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.896937][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:57:46 executing program 0: 18:57:46 executing program 0: 18:57:46 executing program 0: 18:57:46 executing program 0: [ 218.033712][ T7216] device veth0_macvtap entered promiscuous mode [ 218.052808][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.061651][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 18:57:46 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x800000000000803, 0x0) pipe(0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) [ 218.109545][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.134546][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.153837][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.162643][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.202530][ T7317] device veth0_vlan entered promiscuous mode [ 218.279086][ T7423] device veth0_macvtap entered promiscuous mode [ 218.301746][ T7216] device veth1_macvtap entered promiscuous mode [ 218.324641][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.340392][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.363710][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.381449][ T7650] device veth0_vlan entered promiscuous mode [ 218.400520][ T7423] device veth1_macvtap entered promiscuous mode [ 218.429315][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.438051][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.456426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.478508][ T7650] device veth1_vlan entered promiscuous mode 18:57:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) [ 218.513044][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.521510][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:57:46 executing program 1: [ 218.563731][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.571920][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.605679][ T7317] device veth1_vlan entered promiscuous mode [ 218.633662][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.645770][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.662193][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.693242][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.711708][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.733469][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.755219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.787863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.797838][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.809816][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.820084][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.831252][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.842220][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.854158][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.867162][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.883842][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.894441][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.905507][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.916428][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.928249][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.939621][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.951165][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.963507][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.974707][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.984694][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.995197][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.006433][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.021215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.031187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.040216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.049046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.058428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.067654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.112784][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.121355][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.133574][ T7650] device veth0_macvtap entered promiscuous mode [ 219.218559][ T7650] device veth1_macvtap entered promiscuous mode [ 219.230955][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.240747][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.249873][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.259977][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.271184][ T7317] device veth0_macvtap entered promiscuous mode [ 219.526278][ T7317] device veth1_macvtap entered promiscuous mode [ 219.559499][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.584556][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.599900][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.618943][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.631187][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.655916][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.702380][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.719905][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.740481][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.765711][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.776217][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.786802][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.796168][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.859166][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.871956][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:57:48 executing program 2: [ 219.912764][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.928788][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.952491][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.967020][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.989489][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.007599][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.030392][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.047345][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.074959][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.110294][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.134461][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.145129][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.156540][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.167160][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.179066][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.189374][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.200084][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.214598][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.223876][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.233782][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.243113][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.251724][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.309841][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.320605][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.330681][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.341205][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.351144][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.361641][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.371509][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.382315][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.392120][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 220.403958][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.415819][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.474016][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.485469][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:57:48 executing program 3: 18:57:48 executing program 1: 18:57:48 executing program 0: 18:57:48 executing program 4: 18:57:48 executing program 2: 18:57:48 executing program 5: 18:57:49 executing program 5: 18:57:49 executing program 2: 18:57:49 executing program 0: 18:57:49 executing program 4: 18:57:49 executing program 1: 18:57:49 executing program 3: 18:57:49 executing program 2: 18:57:49 executing program 5: 18:57:49 executing program 0: 18:57:49 executing program 1: 18:57:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x88281) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r0, 0x0) 18:57:49 executing program 4: 18:57:49 executing program 5: 18:57:49 executing program 0: 18:57:49 executing program 2: 18:57:49 executing program 1: 18:57:49 executing program 3: 18:57:49 executing program 4: 18:57:49 executing program 5: 18:57:49 executing program 2: 18:57:49 executing program 0: 18:57:49 executing program 1: 18:57:49 executing program 3: 18:57:49 executing program 4: 18:57:49 executing program 2: 18:57:49 executing program 5: 18:57:49 executing program 0: 18:57:49 executing program 1: 18:57:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c100000100540ac470dc8b35130000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 18:57:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x10) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) 18:57:49 executing program 2: 18:57:49 executing program 5: 18:57:49 executing program 0: 18:57:49 executing program 1: [ 221.638958][ T8388] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 221.658458][ T8392] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:57:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d11d7021de7ac4859d353e7fc52143a8c659fba8b78f2fd1b899a75109bc435d29200009144d4f3ff8d44a94ee01248bcb4a848fcf1a"], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) 18:57:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0xffffffffffffffff) renameat(0xffffffffffffffff, 0x0, r3, &(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) timer_create(0x6, 0x0, &(0x7f0000000300)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) dup2(r4, r2) 18:57:50 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="5239a3944626e1583b04b180e501a4181ec6ca66e71db7953ab39732a78497ab8c98", 0x0}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4400ae8f, &(0x7f0000000000)) dup2(r6, r5) 18:57:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 18:57:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @mcast2, 0x2}, 0x1c) 18:57:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0xffffffffffffffff) renameat(r1, 0x0, r3, &(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000280)={0x0, 0x0, 0x2, &(0x7f0000000380)}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x3d, 0x4, @tid=r5}, &(0x7f0000000300)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) dup2(r4, r2) [ 222.055087][ T8410] kvm: emulating exchange as write 18:57:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) renameat(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)={0x0, 0x0, 0x2, &(0x7f0000000380)}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x0, 0x4, @tid=r4}, &(0x7f0000000300)) dup2(r3, r2) 18:57:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f00007e2000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000217000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00007e2000/0x7000)=nil, 0x3) 18:57:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c100000100540ac470dc8b35130000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3a, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 18:57:52 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 18:57:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0xffffffffffffffff) renameat(r1, 0x0, r3, &(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000280)={0x0, 0x0, 0x2, &(0x7f0000000380)}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x3d, 0x4, @tid=r5}, &(0x7f0000000300)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) dup2(r4, r2) 18:57:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d11d7021de7ac4859d353e7fc52143a8c659fba8b78f2fd1b899a75109bc435d29200009144d4f3ff8d44a94ee01248bcb4a848fcf1a"], 0x3a) semget$private(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 18:57:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x800000080004105) [ 224.127175][ T8463] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 18:57:52 executing program 0: syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @remote={0xfe, 0x80, [0xa0]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c41bd3be27df3e34066d42ca0a5c11b37adac15084e6af736b41e5a81802"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}]}}}}}}, 0x0) 18:57:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/8, 0x8}}], 0x5, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 18:57:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x26004fe8, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='$'], 0x20}}], 0x1, 0x0) 18:57:52 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpriority(0x2, 0x0) 18:57:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 224.591937][ T8493] kvm [8492]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 224.592018][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000047 data 0x49 [ 224.592108][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000006a data 0xf9 18:57:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='!wlan0\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 224.592196][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000065 data 0x35 [ 224.595853][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007c data 0x85 [ 224.595982][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007c data 0xf3 [ 224.596113][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000063 data 0x4f [ 224.596165][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000018 data 0xc7 [ 224.596252][ T8493] kvm [8492]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001a data 0xc5 [ 224.825074][ T8511] kvm [8507]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 18:57:54 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syslog(0x9, 0x0, 0x0) 18:57:54 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x10, 0x3a, 0x0, @remote={0xfe, 0x80, [0xa0]}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 18:57:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000007c0)=""/98, 0x62}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/8, 0x8}}], 0x5, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') 18:57:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000000085) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000005c0)=0x17000) dup2(r5, r4) 18:57:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xfffffd38}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000001900000028001200090001007665746800000000380002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}, 0x1, 0x800000000000000}, 0x0) [ 226.631779][ T8557] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 226.652561][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.690158][ T8560] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 18:57:55 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 18:57:55 executing program 0: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r3, r4, 0x0, 0x100000080000000) 18:57:55 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup3(r3, r4, 0x0) r6 = socket$inet6(0xa, 0x401000000001, 0x0) close(r6) dup2(r5, r6) 18:57:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') sendfile(r2, r3, 0x0, 0x800000080004105) [ 227.382329][ T8557] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 18:57:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 227.450483][ T8573] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 18:57:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="72617700801f00000000000000000000000000000000000000000000000000000200000003000000f00271000000000048010000480100000000000048010000580200005802000058eba800580200005802000003"], 0x1) [ 227.555302][ T8557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.568241][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.651798][ T8574] bond1: (slave veth3): Enslaving as a backup interface with a down link 18:57:55 executing program 4: socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='6', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000000, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 18:57:56 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x78, 0x3a, 0xff, @remote={0xfe, 0x80, [0xa0]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c41bd3be27df3e34066d42ca0a5c11b37adac15084e6af736b41e5a80302"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}]}}}}}}, 0x0) 18:57:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x8}}}}, 0x100c) 18:57:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:56 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffc) 18:57:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) [ 228.349158][ T8676] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 228.373174][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000040 18:57:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 228.409886][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000025 18:57:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58010000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001007072696f89697479000000000000000000000000000000000000000000000000050003000e00000000000800", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005"], 0x158}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4400ae8f, &(0x7f0000000000)) [ 228.458322][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001e [ 228.495325][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000085 18:57:56 executing program 3: add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="de", 0x1, 0xfffffffffffffffc) [ 228.554021][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000079 [ 228.576655][ T8688] kvm [8685]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 228.596810][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000002c [ 228.654319][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000011 [ 228.684721][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000019 18:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 228.735243][ T8672] kvm [8670]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000001d 18:57:57 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 18:57:57 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) 18:57:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="69a19e7139d967b157af66623c7918747409ce8466a2efdf681a5694c5d62f61daab0ccb7b21413b8f6fa537aa2ca289bfcb", 0x32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:57 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4004ae99, 0x0) dup2(r6, r5) 18:57:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) 18:57:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffff9}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = mq_open(&(0x7f0000000100)='s\x8f1^g\x80\x12#\xd8=K\xa6\xbb\xdd\xe9\xae\xbb\xb2u3\x96\x1d\x9e.\x81\xe2\x12\xf3U\x18\xf58\x1dd\xee;-R\xc4h\x99\xbf6\x85<%\xdeD,\x0eET\xe25\xb7\x9a\xfcCHQ\xe7\x92m\xd1KH\xff\x16\xfa*\xbc\xd3\x1a\x04\xe39,\tt\"\xd7J\xf3\x8d\xbb\xd6\x8fB\xc6\xa8\xb1)\xee\x80', 0x0, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000356000)) 18:57:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) execve(0x0, 0x0, &(0x7f0000000340)=[&(0x7f00000002c0)='/dev/kvm\x00']) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_rr_get_interval(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:57:58 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/134, 0x7ffff000}], 0x1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 18:57:58 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0xe) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x8, r2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={0x1ff}, &(0x7f0000000200), 0x0) [ 230.759345][ T27] audit: type=1326 audit(1589569078.955:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8771 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0xffff0000 18:57:59 executing program 4: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x9, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 18:57:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) 18:57:59 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xd86}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 18:57:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0xc2, 0x2a, "d6ba7dc5c639286954f46df4d55a0e5f3f49ca69104caf2d493aa59703cb602f527c5d51b0d41166553921abc6f86914f3a43ec9937247425ce578a20c665a07aac56800bba30539c99d45e0c98b840364c796343e9c29872e83298bd10b6fc1840a2aeae196ae7ce706831e5b8faf14585dd70fd68e467ee1ac7f6efa6a8e685344473241ae6500a90161a885ccb5f3a0d887d82fa2a64a04411bb15d4e15af1c061bf4c94f5bd3a7c63c3f56db1d4975903aa9857d1d8ad62427b58861"}]}, 0xd8}}, 0x0) 18:57:59 executing program 4: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x9, 0x9, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 18:57:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) 18:57:59 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 231.525327][ T27] audit: type=1326 audit(1589569079.725:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8771 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0xffff0000 18:57:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140041c19059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6e74703c48f93b82a0000000000000000a5e54e0000000000000000", 0x41}, {&(0x7f0000000300)="4d999e6effc4548cbffb2f", 0xb}], 0x2}, 0x0) 18:57:59 executing program 3: socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000140041f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6e74703c48f93b82a0000000000000000a5e54e0000000000000000", 0x41}, {&(0x7f0000000300)="4d999e6effc4548cbffb2f", 0xb}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000140041f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6e74703c48f93b82a0000000000000000a5e54e0000000000000000", 0x41}, {&(0x7f0000000300)="4d999e6effc4548cbffb2f", 0xb}], 0x2}, 0x0) 18:57:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) 18:57:59 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vhci(r0, &(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 18:57:59 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) 18:57:59 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000001100)=""/53, 0xfcd8}, {&(0x7f0000001340)=""/223, 0xdf}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xd86}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd4, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 18:57:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) 18:58:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2b, 0x801, 0x40000) 18:58:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 18:58:00 executing program 3: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x6, @pix_mp={0x5, 0x8000, 0x584e4f53, 0x6, 0x0, [{0x0, 0x3}, {0x401, 0x2}, {0xb9, 0x9}, {0x2, 0x200030}, {0x2, 0x7}, {0xfffffe00, 0x1}, {0xfc0, 0x8}, {0x3, 0x21}], 0x5, 0x7, 0x6}}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe456}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x155) socket$netlink(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x41fff000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000d3c000/0x2000)=nil}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480), 0x4) r5 = syz_open_dev$usbfs(0x0, 0x6, 0x129802) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r5, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16], 0x110) 18:58:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) [ 231.976916][ C0] sd 0:0:1:0: [sg0] tag#8108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 231.987428][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB: Test Unit Ready [ 231.993969][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.003586][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.013372][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.023018][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.032624][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.042230][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.051844][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.061456][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.071076][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.080699][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.090317][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.099949][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.109535][ C0] sd 0:0:1:0: [sg0] tag#8108 CDB[c0]: 00 00 00 00 00 00 00 00 18:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:58:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4138ae84, &(0x7f0000000500)=ANY=[]) 18:58:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) [ 232.313321][ T8876] ------------[ cut here ]------------ [ 232.369093][ T8876] memtype_reserve failed: [mem 0xffffffffff000-0x003fefff], req write-back [ 232.425491][ T8876] WARNING: CPU: 0 PID: 8876 at arch/x86/mm/pat/memtype.c:589 memtype_reserve+0x69f/0x820 [ 232.435325][ T8876] Kernel panic - not syncing: panic_on_warn set ... [ 232.441920][ T8876] CPU: 0 PID: 8876 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 232.450505][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.460563][ T8876] Call Trace: [ 232.463870][ T8876] dump_stack+0x188/0x20d [ 232.468213][ T8876] ? memtype_reserve+0x5b0/0x820 18:58:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) [ 232.473155][ T8876] panic+0x2e3/0x75c [ 232.477063][ T8876] ? add_taint.cold+0x16/0x16 [ 232.481752][ T8876] ? __probe_kernel_read+0x188/0x1d0 [ 232.487047][ T8876] ? __warn.cold+0x14/0x35 [ 232.491476][ T8876] ? memtype_reserve+0x69f/0x820 [ 232.496437][ T8876] __warn.cold+0x2f/0x35 [ 232.500684][ T8876] ? irq_work_queue+0xc3/0x100 [ 232.505455][ T8876] ? memtype_reserve+0x69f/0x820 [ 232.510397][ T8876] report_bug+0x27b/0x2f0 [ 232.514732][ T8876] do_error_trap+0x12b/0x220 [ 232.519418][ T8876] ? memtype_reserve+0x69f/0x820 [ 232.524368][ T8876] do_invalid_op+0x32/0x40 [ 232.528790][ T8876] ? memtype_reserve+0x69f/0x820 [ 232.533731][ T8876] invalid_op+0x23/0x30 [ 232.537893][ T8876] RIP: 0010:memtype_reserve+0x69f/0x820 [ 232.543450][ T8876] Code: 48 8b 2c ed 80 ff 28 88 e8 ae ad 3e 00 48 8d 4b ff 49 89 e8 4c 89 e2 48 c7 c6 e0 ff 28 88 48 c7 c7 40 f8 28 88 e8 79 e8 0f 00 <0f> 0b 41 bf ea ff ff ff e9 03 fc ff ff 41 bf ea ff ff ff e9 f8 fb [ 232.563060][ T8876] RSP: 0018:ffffc900018577a0 EFLAGS: 00010282 [ 232.569136][ T8876] RAX: 0000000000000000 RBX: 00000000003ff000 RCX: 0000000000000000 [ 232.577112][ T8876] RDX: 0000000000015b8f RSI: ffffffff815ce651 RDI: fffff5200030aee6 [ 232.585090][ T8876] RBP: ffffffff8828fe00 R08: ffff8880a9216540 R09: ffffed1015cc66a9 [ 232.593071][ T8876] R10: ffff8880ae633547 R11: ffffed1015cc66a8 R12: 000ffffffffff000 [ 232.601044][ T8876] R13: 1ffff9200030aefa R14: dffffc0000000000 R15: 0000000000000000 [ 232.609036][ T8876] ? vprintk_func+0x81/0x17e [ 232.613643][ T8876] ? find_held_lock+0x2d/0x110 [ 232.618417][ T8876] ? pat_init+0x440/0x440 [ 232.622758][ T8876] ? __init_cache_modes+0x270/0x270 [ 232.627963][ T8876] ? mark_lock+0x12b/0xf10 [ 232.632908][ T8876] reserve_pfn_range+0x173/0x470 [ 232.637851][ T8876] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 232.643572][ T8876] ? lock_downgrade+0x840/0x840 [ 232.648442][ T8876] track_pfn_remap+0x18b/0x280 [ 232.653219][ T8876] remap_pfn_range+0x202/0xbf0 [ 232.657998][ T8876] ? __schedule+0x93f/0x1ff0 [ 232.662598][ T8876] ? mark_held_locks+0x9f/0xe0 [ 232.667372][ T8876] ? copy_page_range+0x1f00/0x1f00 [ 232.672489][ T8876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.677953][ T8876] ? preempt_schedule_irq+0xee/0x150 [ 232.683250][ T8876] dma_direct_mmap+0x197/0x260 [ 232.688031][ T8876] dma_mmap_attrs+0xfe/0x150 [ 232.692636][ T8876] usbdev_mmap+0x3ae/0x730 [ 232.697070][ T8876] ? usbdev_vm_close+0x40/0x40 [ 232.701848][ T8876] mmap_region+0xafb/0x1540 [ 232.706366][ T8876] ? __x64_sys_brk+0x6e0/0x6e0 [ 232.711135][ T8876] ? security_mmap_addr+0x81/0xa0 [ 232.716164][ T8876] ? get_unmapped_area+0x2a0/0x3c0 [ 232.721293][ T8876] do_mmap+0x849/0x1160 [ 232.725475][ T8876] vm_mmap_pgoff+0x197/0x200 [ 232.730077][ T8876] ? randomize_stack_top+0x100/0x100 [ 232.735368][ T8876] ? ksys_dup3+0x3c0/0x3c0 [ 232.739794][ T8876] ? ns_to_kernel_old_timeval+0x100/0x100 [ 232.745524][ T8876] ksys_mmap_pgoff+0x457/0x5b0 [ 232.750311][ T8876] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 232.755951][ T8876] ? __ia32_sys_clock_settime+0x260/0x260 [ 232.761695][ T8876] ? trace_hardirqs_off_caller+0x55/0x230 [ 232.767427][ T8876] do_syscall_64+0xf6/0x7d0 [ 232.771943][ T8876] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 232.777838][ T8876] RIP: 0033:0x45c829 [ 232.781737][ T8876] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.801431][ T8876] RSP: 002b:00007f260d449c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 232.809872][ T8876] RAX: ffffffffffffffda RBX: 00000000004f5b60 RCX: 000000000045c829 [ 232.817847][ T8876] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 232.825823][ T8876] RBP: 000000000078c040 R08: 0000000000000007 R09: 0000000000000000 [ 232.834583][ T8876] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000ffffffff [ 232.842557][ T8876] R13: 000000000000073e R14: 00000000004c9ff5 R15: 00007f260d44a6d4 [ 232.852364][ T8876] Kernel Offset: disabled [ 232.856780][ T8876] Rebooting in 86400 seconds..