[ OK ] Started Regular background program processing daemon. Starting getty on tty2-tty6 if dbus and logind are not available... Starting OpenBSD Secure Shell server... [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. Starting Load/Save RF Kill Switch Status... [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. 2020/05/25 11:43:53 fuzzer started 2020/05/25 11:43:54 dialing manager at 10.128.0.26:38825 2020/05/25 11:43:54 syscalls: 3055 2020/05/25 11:43:54 code coverage: enabled 2020/05/25 11:43:54 comparison tracing: enabled 2020/05/25 11:43:54 extra coverage: enabled 2020/05/25 11:43:54 setuid sandbox: enabled 2020/05/25 11:43:54 namespace sandbox: enabled 2020/05/25 11:43:54 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/25 11:43:54 fault injection: enabled 2020/05/25 11:43:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/25 11:43:54 net packet injection: enabled 2020/05/25 11:43:54 net device setup: enabled 2020/05/25 11:43:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/25 11:43:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/25 11:43:54 USB emulation: enabled 11:45:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) pipe(0x0) syzkaller login: [ 154.121489][ T6817] IPVS: ftp: loaded support on port[0] = 21 11:45:29 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) getpid() setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) [ 154.266646][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 154.377879][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.397080][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.419469][ T6817] device bridge_slave_0 entered promiscuous mode [ 154.439779][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.451576][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.460447][ T6817] device bridge_slave_1 entered promiscuous mode [ 154.505621][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.508909][ T6947] IPVS: ftp: loaded support on port[0] = 21 [ 154.536572][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.600264][ T6817] team0: Port device team_slave_0 added [ 154.621383][ T6817] team0: Port device team_slave_1 added 11:45:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) [ 154.695083][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.703140][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.732822][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.777711][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.784687][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.812814][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.861790][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 154.970155][ T6817] device hsr_slave_0 entered promiscuous mode 11:45:30 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = gettid() prctl$PR_SET_TSC(0x1a, 0x1) tkill(r0, 0x1b) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x33}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020500000200000000000000000000006622e85f1d08e1fb8abc9e497817db65d9d86e4f164f52b0d6f87a"], 0x10}}, 0x0) [ 155.046702][ T6817] device hsr_slave_1 entered promiscuous mode [ 155.132735][ T7090] IPVS: ftp: loaded support on port[0] = 21 [ 155.220843][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.236305][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.244439][ T6947] device bridge_slave_0 entered promiscuous mode [ 155.308265][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.315399][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.333215][ T6947] device bridge_slave_1 entered promiscuous mode [ 155.412443][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 11:45:30 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 155.459473][ T7145] IPVS: ftp: loaded support on port[0] = 21 [ 155.469497][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.551529][ T6947] team0: Port device team_slave_0 added [ 155.588616][ T6947] team0: Port device team_slave_1 added [ 155.647764][ T6817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.718416][ T6817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.767546][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.774544][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.804356][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.816805][ T6817] netdevsim netdevsim0 netdevsim2: renamed from eth2 11:45:30 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 155.874800][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.886335][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.932749][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.948429][ T6817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.004417][ T7090] chnl_net:caif_netlink_parms(): no params data found [ 156.081167][ T6947] device hsr_slave_0 entered promiscuous mode [ 156.126588][ T6947] device hsr_slave_1 entered promiscuous mode [ 156.166282][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.174070][ T6947] Cannot create hsr debugfs directory [ 156.212295][ T7297] IPVS: ftp: loaded support on port[0] = 21 [ 156.237526][ T7315] IPVS: ftp: loaded support on port[0] = 21 [ 156.369760][ T7145] chnl_net:caif_netlink_parms(): no params data found [ 156.454532][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.462047][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.471407][ T7090] device bridge_slave_0 entered promiscuous mode [ 156.509570][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.518913][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.528393][ T7090] device bridge_slave_1 entered promiscuous mode [ 156.632596][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.645895][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.679305][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.689395][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.703119][ T7145] device bridge_slave_0 entered promiscuous mode [ 156.770306][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.793514][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.803136][ T7145] device bridge_slave_1 entered promiscuous mode [ 156.816248][ T7090] team0: Port device team_slave_0 added [ 156.833646][ T7090] team0: Port device team_slave_1 added [ 156.871231][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.919702][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.942622][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 156.994119][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.002275][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.029301][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.055446][ T6947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.101408][ T6947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.153672][ T6947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.209860][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.218092][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.245102][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.268006][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.281069][ T7145] team0: Port device team_slave_0 added [ 157.294698][ T7145] team0: Port device team_slave_1 added [ 157.302515][ T6947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.348664][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 157.412944][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.427413][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.454321][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.467874][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.474823][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.502495][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.609457][ T7090] device hsr_slave_0 entered promiscuous mode [ 157.697363][ T7090] device hsr_slave_1 entered promiscuous mode [ 157.736134][ T7090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.743740][ T7090] Cannot create hsr debugfs directory [ 157.762334][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.770722][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.779895][ T7315] device bridge_slave_0 entered promiscuous mode [ 157.789305][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.799380][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.828057][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.835401][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.845710][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.855066][ T7315] device bridge_slave_1 entered promiscuous mode [ 157.960381][ T7145] device hsr_slave_0 entered promiscuous mode [ 158.016755][ T7145] device hsr_slave_1 entered promiscuous mode [ 158.056325][ T7145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.063903][ T7145] Cannot create hsr debugfs directory [ 158.115298][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.133517][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.141853][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.154282][ T7297] device bridge_slave_0 entered promiscuous mode [ 158.172442][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.182085][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.192278][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.199597][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.209172][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.255139][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.268911][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.280614][ T7297] device bridge_slave_1 entered promiscuous mode [ 158.289075][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.300145][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.309249][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.318716][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.325762][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.337707][ T7315] team0: Port device team_slave_0 added [ 158.364676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.381476][ T7315] team0: Port device team_slave_1 added [ 158.418410][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.430406][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.481731][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.498259][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.505257][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.538271][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.555469][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.563466][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.591412][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.634900][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.647840][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.703317][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.711318][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.721374][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.730521][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.739358][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.789927][ T7315] device hsr_slave_0 entered promiscuous mode [ 158.846866][ T7315] device hsr_slave_1 entered promiscuous mode [ 158.886250][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.893827][ T7315] Cannot create hsr debugfs directory [ 158.907545][ T7297] team0: Port device team_slave_0 added [ 158.922941][ T6817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.938957][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.971255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.980872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.995362][ T7297] team0: Port device team_slave_1 added [ 159.027571][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.034537][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.063936][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.080865][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.108783][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.115750][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.146805][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.259532][ T7297] device hsr_slave_0 entered promiscuous mode [ 159.328059][ T7297] device hsr_slave_1 entered promiscuous mode [ 159.406477][ T7297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.414068][ T7297] Cannot create hsr debugfs directory [ 159.426970][ T7145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.488415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.495870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.505613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.514131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.545859][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.554287][ T7145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.583399][ T7145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.628889][ T7145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.699770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.709065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.719571][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.726717][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.734725][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.744003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.752997][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.760140][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.774984][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.804821][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.832329][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.842948][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.852876][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.862619][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.872376][ T7090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.928637][ T7090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.980600][ T7090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.042461][ T7090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.116861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.197841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.207836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.249760][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.265269][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.274496][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.288091][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.331738][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.343719][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.354895][ T6947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.427761][ T7315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.449043][ T7315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.526641][ T7315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.604683][ T7315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.663750][ T6817] device veth0_vlan entered promiscuous mode [ 160.689264][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.697839][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.710385][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.718884][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.751119][ T7297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.797881][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.805421][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.814659][ T6817] device veth1_vlan entered promiscuous mode [ 160.830346][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.839653][ T7297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.910058][ T7297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.978625][ T7297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.071456][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.102225][ T6817] device veth0_macvtap entered promiscuous mode [ 161.130113][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.140989][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.152768][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.163109][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.178822][ T6817] device veth1_macvtap entered promiscuous mode [ 161.197965][ T7145] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.212885][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.223498][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.244523][ T7090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.273595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.284156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.294287][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.302654][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.317840][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.326764][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.338738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.348721][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.356308][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.369257][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.398368][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.409409][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.420650][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.430013][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.439543][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.449007][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.467394][ T7090] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.477493][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.510631][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.520164][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.531775][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.540924][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.592940][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.604206][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.614367][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.621537][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.630795][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.642312][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.651308][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.658479][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.667355][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.676177][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.743952][ T6947] device veth0_vlan entered promiscuous mode [ 161.771160][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.779581][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.788007][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.800307][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.809319][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.823028][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.833318][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.978198][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.997075][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.005206][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.014678][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.039377][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.052916][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.064576][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.105132][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.128319][ C1] hrtimer: interrupt took 27469 ns [ 162.153322][ T6947] device veth1_vlan entered promiscuous mode 11:45:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 162.187479][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.244036][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.254157][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.272434][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.289994][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.299673][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:45:37 executing program 0: [ 162.343367][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.363733][ T7090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 11:45:37 executing program 0: [ 162.393395][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.405667][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.430730][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.442971][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.462961][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.475213][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 11:45:37 executing program 0: [ 162.491828][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.502657][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:45:37 executing program 0: [ 162.574718][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.594599][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 11:45:37 executing program 0: [ 162.631694][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.652529][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.664874][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 11:45:37 executing program 0: [ 162.682315][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.693477][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.700672][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.759423][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.790523][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.813670][ T6947] device veth0_macvtap entered promiscuous mode [ 162.843040][ T7090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.892574][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.910437][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.942315][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.957623][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.970791][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.979900][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.987236][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.999794][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.008499][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.040657][ T6947] device veth1_macvtap entered promiscuous mode [ 163.069834][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.078688][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.088223][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.098580][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.107884][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.114944][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.123089][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.132276][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.141263][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.148424][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.156525][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.165154][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.174506][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.217321][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.227517][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.236937][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.245529][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.255571][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.265102][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.275567][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.296221][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.304208][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.312832][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.321977][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.331426][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.340677][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.349713][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.359298][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.376554][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.385304][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.412512][ T7297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.427809][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.438431][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.472364][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.485523][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.500047][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.515537][ T7145] device veth0_vlan entered promiscuous mode [ 163.532282][ T7090] device veth0_vlan entered promiscuous mode [ 163.540361][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.550087][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.559267][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.568722][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.578285][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.587239][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.595574][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.604305][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.619590][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.634086][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.647237][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.663515][ T7145] device veth1_vlan entered promiscuous mode [ 163.675485][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.685467][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.693571][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.702451][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.710534][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.719328][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.728176][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.737180][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.746440][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.762387][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.788353][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.814691][ T7090] device veth1_vlan entered promiscuous mode [ 163.832609][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.842870][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.851924][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.860357][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.885359][ T7145] device veth0_macvtap entered promiscuous mode [ 163.947729][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.956401][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.966839][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.975652][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.991408][ T7145] device veth1_macvtap entered promiscuous mode [ 164.124724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.146106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.153621][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.167812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:45:39 executing program 1: [ 164.204297][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.217675][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.245917][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.278667][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.294423][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.315560][ T7090] device veth0_macvtap entered promiscuous mode [ 164.349325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.361442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.386576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.423128][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.439506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.454178][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.467090][ T7090] device veth1_macvtap entered promiscuous mode [ 164.475013][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.486134][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.496478][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.507308][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.519743][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.546167][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.554253][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.565360][ T2474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.601517][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.622081][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.633924][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.645564][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.656188][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.669209][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.681878][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.696925][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.708677][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.717316][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.726377][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.735336][ T7297] device veth0_vlan entered promiscuous mode [ 164.747222][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.758285][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.768768][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.783179][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.793138][ T7090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.803917][ T7090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.817945][ T7090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.880149][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.888422][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.897684][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.907577][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.922358][ T7297] device veth1_vlan entered promiscuous mode [ 165.009395][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.019081][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.219269][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.239873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.355898][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.364546][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.376352][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.384867][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.408403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.418374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.436164][ T7315] device veth0_vlan entered promiscuous mode [ 165.457605][ T7297] device veth0_macvtap entered promiscuous mode [ 165.489169][ T7297] device veth1_macvtap entered promiscuous mode [ 165.513230][ T7315] device veth1_vlan entered promiscuous mode [ 165.574808][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.587302][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.599383][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.611182][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.622952][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.634460][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.645832][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 165.658363][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:45:40 executing program 2: 11:45:40 executing program 0: [ 165.670927][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.691036][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.699923][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.713689][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.731338][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.757080][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.768612][ T2501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.781218][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.825131][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.835901][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.856481][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.873744][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.885180][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.904587][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.915611][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.936564][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.952854][ T7315] device veth0_macvtap entered promiscuous mode [ 165.969521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.979970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.990308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.001338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.021738][ T2594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.040228][ T7315] device veth1_macvtap entered promiscuous mode [ 166.188917][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.200678][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.211769][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.222606][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.232807][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.243849][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.253903][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.267036][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.277393][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.288152][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.300976][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.314195][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.323479][ T2502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.337313][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.348371][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.358610][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.370917][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.381344][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.391900][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.403189][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.414527][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.424502][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.434993][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.447217][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.491747][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.506965][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:45:42 executing program 4: 11:45:42 executing program 1: 11:45:42 executing program 3: 11:45:42 executing program 0: 11:45:42 executing program 2: 11:45:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:42 executing program 1: 11:45:42 executing program 3: 11:45:42 executing program 2: 11:45:42 executing program 0: 11:45:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:42 executing program 4: 11:45:42 executing program 2: 11:45:42 executing program 1: 11:45:42 executing program 3: 11:45:42 executing program 0: 11:45:42 executing program 4: 11:45:42 executing program 2: 11:45:42 executing program 1: 11:45:42 executing program 3: 11:45:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:42 executing program 1: 11:45:42 executing program 0: 11:45:42 executing program 4: 11:45:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) fstat(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 11:45:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="baf80c0f21312c9187f01766efbafc0cb8bd00660f320f624e10bad104bd26660ff89a5f50501b0f20c0663502000080f26eb800080fae470b", 0x39}], 0x1, 0x51, 0x0, 0x51) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:45:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) 11:45:42 executing program 4: unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x0) 11:45:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece4006a, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 11:45:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 167.648293][ T8180] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:45:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c00000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000005c000200000000010000000000000000000000000000000000000000100001"], 0x8c}}, 0x0) 11:45:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd458c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a20000000000000008465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1405e7daef356602487886b6f0beb5ca9a9b31a57e25525fa0ff5c2226e79db12959e59f2c911ee035c82f1a81ef15b43d51ff1fa025bfb80674c9d0e2ec3c3a07e7e0d2877a252983b69c8272512f866d62c3389dedbe306fdad679bfa8699eac6529f9f0e33baaef232efd88423baa99550cbb3a0ece8057a1501c96d601b5cb1278fbcd12e8f8ff6e1acb52d07e142986b049d22b79f0484f62c3ceb485b2135349e91cb7a5e45e0fa3454d317c1e0c84ed54da5639fc2825c74c36d65d5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:42 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfeffff}], 0x0, 0x0, 0x0}) 11:45:42 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 168.042936][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:43 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 168.162820][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 11:45:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 168.413915][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x13, 0x0, &(0x7f0000000300)="cee3f8e73fa4d78654727119b1f37d50bf7a61", 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:43 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11:45:43 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 168.839200][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:43 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) 11:45:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$pid(0x3, 0x0) 11:45:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[], 0xb) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 11:45:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00f8a4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b98", 0xe1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 169.124185][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0x0, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'virt_wifi0\x00', 'ip6gre0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x448) 11:45:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 169.385907][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.424690][ T8289] x_tables: duplicate underflow at hook 1 11:45:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:44 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 169.469781][ T8292] x_tables: duplicate underflow at hook 1 11:45:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 11:45:44 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 169.615932][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 170.249792][ T29] audit: type=1804 audit(1590407145.282:2): pid=8313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir157373850/syzkaller.lqidL2/12/file0" dev="sda1" ino=15796 res=1 [ 170.275494][ T29] audit: type=1804 audit(1590407145.302:3): pid=8313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir157373850/syzkaller.lqidL2/12/file0" dev="sda1" ino=15796 res=1 11:45:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 11:45:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x10000000000, 0x1182) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)='\"', 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x2400000e) 11:45:47 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:47 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:47 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x4804, 0x0, 0x0) [ 172.311089][ T8321] Cannot find add_set index 0 as target [ 172.336998][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0xffffffffffffffff, 0x7}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 11:45:47 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) 11:45:47 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:45:47 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:47 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd458c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a20000000000000008465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1405e7daef356602487886b6f0beb5ca9a9b31a57e25525fa0ff5c2226e79db12959e59f2c911ee035c82f1a81ef15b43d51ff1fa025bfb80674c9d0e2ec3c3a07e7e0d2877a252983b69c8272512f866d62c3389dedbe306fdad679bfa8699eac6529f9f0e33baaef232efd88423baa99550cbb3a0ece8057a1501c96d601b5cb1278fbcd12e8f8ff6e1acb52d07e142986b049d22b79f0484f62c3ceb485b2135349e91cb7a5e45e0fa3454d317c1e0c84ed54da5639fc2825c74c36d65d5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:47 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r1 = socket(0x10, 0x3, 0x0) sendto(r1, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20008000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x5e) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) [ 172.503535][ T8332] Cannot find add_set index 0 as target [ 172.534592][ T8337] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 11:45:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) [ 172.574555][ T8337] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 172.611924][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:47 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:47 executing program 5: socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 172.639691][ T8341] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 172.669796][ T8337] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 11:45:47 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 11:45:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x130) write$uinput_user_dev(r2, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 11:45:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706050000000000fdb906b9000000000500010006"], 0x1c}}, 0x0) 11:45:47 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 11:45:48 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 172.923097][ T8364] input: syz0 as /devices/virtual/input/input5 [ 172.985041][ T8361] ================================================================== [ 172.994213][ T8361] BUG: KASAN: use-after-free in __mutex_lock+0x1033/0x13c0 [ 173.001646][ T8361] Read of size 8 at addr ffff8880569d4150 by task syz-executor.1/8361 [ 173.010167][ T8361] [ 173.012521][ T8361] CPU: 0 PID: 8361 Comm: syz-executor.1 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 173.022331][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.032781][ T8361] Call Trace: [ 173.036095][ T8361] dump_stack+0x18f/0x20d [ 173.040452][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.045326][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.050213][ T8361] print_address_description.constprop.0.cold+0xd3/0x413 [ 173.058514][ T8361] ? cdev_device_del+0x69/0x80 [ 173.063827][ T8361] ? joydev_disconnect+0x3d/0xb0 [ 173.068809][ T8361] ? __input_unregister_device+0x1b0/0x430 [ 173.074730][ T8361] ? input_unregister_device+0xb4/0xf0 [ 173.080215][ T8361] ? uinput_destroy_device+0x1e2/0x240 [ 173.085700][ T8361] ? vprintk_func+0x97/0x1a6 [ 173.090321][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.095202][ T8361] kasan_report.cold+0x1f/0x37 [ 173.100003][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.104994][ T8361] __mutex_lock+0x1033/0x13c0 [ 173.109704][ T8361] ? joydev_cleanup+0x21/0x190 [ 173.114609][ T8361] ? print_usage_bug+0x240/0x240 [ 173.119740][ T8361] ? trace_hardirqs_off+0x50/0x220 [ 173.125135][ T8361] ? mutex_trylock+0x2c0/0x2c0 [ 173.130062][ T8361] ? mark_held_locks+0x9f/0xe0 [ 173.134852][ T8361] ? kfree+0x1eb/0x2b0 [ 173.138955][ T8361] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 173.144970][ T8361] ? kfree_const+0x51/0x60 [ 173.149547][ T8361] ? joydev_cleanup+0x21/0x190 [ 173.154435][ T8361] joydev_cleanup+0x21/0x190 [ 173.159252][ T8361] joydev_disconnect+0x45/0xb0 [ 173.164168][ T8361] __input_unregister_device+0x1b0/0x430 [ 173.169841][ T8361] input_unregister_device+0xb4/0xf0 [ 173.176106][ T8361] uinput_destroy_device+0x1e2/0x240 [ 173.181616][ T8361] ? uinput_destroy_device+0x240/0x240 [ 173.193786][ T8361] uinput_release+0x37/0x50 [ 173.198547][ T8361] __fput+0x33e/0x880 [ 173.202534][ T8361] task_work_run+0xf4/0x1b0 [ 173.207979][ T8361] exit_to_usermode_loop+0x2fa/0x360 [ 173.213540][ T8361] do_syscall_64+0x6b1/0x7d0 [ 173.218127][ T8361] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 173.224015][ T8361] RIP: 0033:0x416621 [ 173.228018][ T8361] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 173.247937][ T8361] RSP: 002b:00007ffdff1d88e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 173.256528][ T8361] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416621 [ 173.264521][ T8361] RDX: 0000000000000000 RSI: 0000000000001587 RDI: 0000000000000006 [ 173.272488][ T8361] RBP: 0000000000000001 R08: 00000000f36e758a R09: 0000000000000000 [ 173.280653][ T8361] R10: 00007ffdff1d89d0 R11: 0000000000000293 R12: 000000000078c900 [ 173.288656][ T8361] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 173.296924][ T8361] [ 173.299264][ T8361] Allocated by task 8364: [ 173.303771][ T8361] save_stack+0x1b/0x40 [ 173.308014][ T8361] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 173.313721][ T8361] kmem_cache_alloc_trace+0x153/0x7d0 [ 173.319177][ T8361] joydev_connect+0x83/0xd2f [ 173.323926][ T8361] input_attach_handler+0x194/0x200 [ 173.329126][ T8361] input_register_device.cold+0xf5/0x246 [ 173.334841][ T8361] uinput_ioctl_handler.isra.0+0x1210/0x1d80 [ 173.340817][ T8361] ksys_ioctl+0x11a/0x180 [ 173.345142][ T8361] __x64_sys_ioctl+0x6f/0xb0 [ 173.349727][ T8361] do_syscall_64+0xf6/0x7d0 [ 173.354226][ T8361] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 173.360474][ T8361] [ 173.362809][ T8361] Freed by task 8361: [ 173.366797][ T8361] save_stack+0x1b/0x40 [ 173.371053][ T8361] __kasan_slab_free+0xf7/0x140 [ 173.375986][ T8361] kfree+0x109/0x2b0 [ 173.379968][ T8361] device_release+0x71/0x200 [ 173.386180][ T8361] kobject_put+0x1c8/0x2f0 [ 173.390791][ T8361] cdev_device_del+0x69/0x80 [ 173.395550][ T8361] joydev_disconnect+0x3d/0xb0 [ 173.400312][ T8361] __input_unregister_device+0x1b0/0x430 [ 173.405938][ T8361] input_unregister_device+0xb4/0xf0 [ 173.411232][ T8361] uinput_destroy_device+0x1e2/0x240 [ 173.417554][ T8361] uinput_release+0x37/0x50 [ 173.422087][ T8361] __fput+0x33e/0x880 [ 173.426177][ T8361] task_work_run+0xf4/0x1b0 [ 173.430767][ T8361] exit_to_usermode_loop+0x2fa/0x360 [ 173.436186][ T8361] do_syscall_64+0x6b1/0x7d0 [ 173.440843][ T8361] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 173.447163][ T8361] [ 173.449618][ T8361] The buggy address belongs to the object at ffff8880569d4000 [ 173.449618][ T8361] which belongs to the cache kmalloc-8k of size 8192 [ 173.463711][ T8361] The buggy address is located 336 bytes inside of [ 173.463711][ T8361] 8192-byte region [ffff8880569d4000, ffff8880569d6000) [ 173.477234][ T8361] The buggy address belongs to the page: [ 173.483005][ T8361] page:ffffea00015a7500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00015a7500 order:2 compound_mapcount:0 compound_pincount:0 [ 173.498597][ T8361] flags: 0xfffe0000010200(slab|head) [ 173.503955][ T8361] raw: 00fffe0000010200 ffffea00023cb308 ffffea00015a6608 ffff8880aa0021c0 [ 173.512535][ T8361] raw: 0000000000000000 ffff8880569d4000 0000000100000001 0000000000000000 [ 173.521115][ T8361] page dumped because: kasan: bad access detected [ 173.527607][ T8361] [ 173.529966][ T8361] Memory state around the buggy address: [ 173.535592][ T8361] ffff8880569d4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.543649][ T8361] ffff8880569d4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.551706][ T8361] >ffff8880569d4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.559974][ T8361] ^ [ 173.566731][ T8361] ffff8880569d4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.574792][ T8361] ffff8880569d4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.582850][ T8361] ================================================================== 11:45:48 executing program 3: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040), 0xa}]) 11:45:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 173.590987][ T8361] Disabling lock debugging due to kernel taint 11:45:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x1b3}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 173.615999][ T8380] __nla_validate_parse: 2 callbacks suppressed [ 173.616008][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:45:48 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 173.669170][ T8361] Kernel panic - not syncing: panic_on_warn set ... [ 173.675813][ T8361] CPU: 0 PID: 8361 Comm: syz-executor.1 Tainted: G B 5.7.0-rc6-next-20200522-syzkaller #0 [ 173.687225][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.697650][ T8361] Call Trace: [ 173.700972][ T8361] dump_stack+0x18f/0x20d [ 173.705461][ T8361] ? __mutex_lock+0xf50/0x13c0 [ 173.710256][ T8361] panic+0x2e3/0x75c [ 173.714172][ T8361] ? __warn_printk+0xf3/0xf3 [ 173.718877][ T8361] ? preempt_schedule_common+0x5e/0xc0 [ 173.724353][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.729344][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.734226][ T8361] ? preempt_schedule_thunk+0x16/0x18 [ 173.739618][ T8361] ? trace_hardirqs_on+0x55/0x230 [ 173.744770][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.749725][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.754813][ T8361] end_report+0x4d/0x53 [ 173.758988][ T8361] kasan_report.cold+0xd/0x37 [ 173.763782][ T8361] ? __mutex_lock+0x1033/0x13c0 [ 173.768650][ T8361] __mutex_lock+0x1033/0x13c0 [ 173.773350][ T8361] ? joydev_cleanup+0x21/0x190 [ 173.778228][ T8361] ? print_usage_bug+0x240/0x240 [ 173.783339][ T8361] ? trace_hardirqs_off+0x50/0x220 [ 173.783468][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.788475][ T8361] ? mutex_trylock+0x2c0/0x2c0 [ 173.788489][ T8361] ? mark_held_locks+0x9f/0xe0 [ 173.788501][ T8361] ? kfree+0x1eb/0x2b0 [ 173.788513][ T8361] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 173.788527][ T8361] ? kfree_const+0x51/0x60 [ 173.788542][ T8361] ? joydev_cleanup+0x21/0x190 [ 173.788551][ T8361] joydev_cleanup+0x21/0x190 [ 173.788564][ T8361] joydev_disconnect+0x45/0xb0 [ 173.788577][ T8361] __input_unregister_device+0x1b0/0x430 [ 173.788590][ T8361] input_unregister_device+0xb4/0xf0 [ 173.788609][ T8361] uinput_destroy_device+0x1e2/0x240 [ 173.853338][ T8361] ? uinput_destroy_device+0x240/0x240 [ 173.858901][ T8361] uinput_release+0x37/0x50 [ 173.863432][ T8361] __fput+0x33e/0x880 [ 173.867433][ T8361] task_work_run+0xf4/0x1b0 [ 173.872200][ T8361] exit_to_usermode_loop+0x2fa/0x360 [ 173.877930][ T8361] do_syscall_64+0x6b1/0x7d0 [ 173.882544][ T8361] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 173.888446][ T8361] RIP: 0033:0x416621 [ 173.892356][ T8361] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 173.912623][ T8361] RSP: 002b:00007ffdff1d88e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 173.921136][ T8361] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416621 [ 173.929252][ T8361] RDX: 0000000000000000 RSI: 0000000000001587 RDI: 0000000000000006 [ 173.937723][ T8361] RBP: 0000000000000001 R08: 00000000f36e758a R09: 0000000000000000 [ 173.946023][ T8361] R10: 00007ffdff1d89d0 R11: 0000000000000293 R12: 000000000078c900 [ 173.954164][ T8361] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 173.964313][ T8361] Kernel Offset: disabled [ 173.969135][ T8361] Rebooting in 86400 seconds..